517ab446512bf4a9bee4023799488672 | Triage

Sharing

General

Target

517ab446512bf4a9bee4023799488672
Size

128KB
MD5

517ab446512bf4a9bee4023799488672
SHA1

bab163cb4f03e8e8f97a7b535ad453fb1fbfbcef
SHA256

39ee4603593626c007c699d2938fd48a32f19c3362d41bab6a438395f0883350
SHA512

9908722921e9b087185dd40c0015d31298fe625b5739ae262cc13d1b03e2ecf92ab559115d35311d4c6514c1c859b527270b661dd3c5c794f39af1426854417e
SSDEEP

3072:BpmgI3tG90HdQ3SqtHwamSx3F7IlyEyB0DPu+JIrVQY:LaD9Q3TtHwamly8PuCI5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-TOPLESS.exe

Files

517ab446512bf4a9bee4023799488672
.zip
GOLAYA-TOPLESS.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ