129b760e678618edb5d4ef6f67b75226 | Triage

Sharing

General

Target

129b760e678618edb5d4ef6f67b75226
Size

2.0MB
MD5

129b760e678618edb5d4ef6f67b75226
SHA1

536ce9004b176d66a3fba3adb72a805a25ed2c56
SHA256

6bcb04947fa747ff4c8d2c3f465d3258fe02c9f108f8f7ba585dab26e56ff7ef
SHA512

643c6cae469e3b9c462acbdaf74e2281fc39fd49f9ca26b54768a8bea29edc885c6ad7e62d38593c36c93ff0fa2d975ce427258edcd67e283e943dc5947fee07
SSDEEP

49152:O0HQiZfvLSixRYSHL5Br6Ry0Z4hJMELPHmMI+FNI:O02eTky0ZEJtLPHnzFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CSM Play.exe

Files

129b760e678618edb5d4ef6f67b75226
.zip
CSM Play.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ