179de27b0a892403e2549f37cf3a1bc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

179de27b0a892403e2549f37cf3a1bc3
Size

144KB
MD5

179de27b0a892403e2549f37cf3a1bc3
SHA1

58faf0f6e2ffdb6c10dc141ebeb65b32291a0c02
SHA256

58e052594edfdef810f7952b882b11a72d6133b05cab1c3babfba47a511c2078
SHA512

0be48aebc66e3dd6ad06703c8d6097733f7c9ab6e89455b2eba96fa412614501fb3f7298d46a744815aab1a0dd401cc276eafa7ee4d8dc371aeffd0a72902d46
SSDEEP

3072:jjxVGVPyDrksauwutTC0LrvWdNkR/EevneTQg0yGL1qwR/lb17D4mcxh8qc:3PwaDxauJtOovoSse0Qg0xpR/ZND4mcg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/vcrackFTP.exe

Files

179de27b0a892403e2549f37cf3a1bc3
.zip
vcrackFTP.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ