5aa0a846fe6cbeaa58fbc9942509dfcd

Sharing

Copy URL Twitter E-mail

General

Target

5aa0a846fe6cbeaa58fbc9942509dfcd
Size

3.4MB
MD5

5aa0a846fe6cbeaa58fbc9942509dfcd
SHA1

6d74a0368e185697d63e465b1ffb6c02903bb3e5
SHA256

a39d24c0b47d45f807cb3ff97d83dfff8348494e3a3c6a23d5cb7cd55a40e767
SHA512

50001a27bbf28e4f333bde6aca4fc1dcfb8d6727c42bfb120524d6463d5594b9f67e5e51ff8fd8db19e02ca1c128ca9f9e8dc3c6847eef4830b2f0ef79525f85
SSDEEP

49152:wSrMXypP5nsfbHrnYk3DL0LJkHDqFw3ADoU3ft:VrMXyl56bLp3XMJXw3ADoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa0a846fe6cbeaa58fbc9942509dfcd

Files

5aa0a846fe6cbeaa58fbc9942509dfcd
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

?CDAPFN0506_CDAPFN0506_X_StartCatalinaFlyBy@@3UCDAPFN_PROPERTIES@@A
?CDAPFN0506_CDAPFN0506_X_WaterLevelInitialise@@3UCDAPFN_PROPERTIES@@A
?CDAPFN0506_StartCatalinaFlyBy@@3UCDAPFN_PROPERTIES@@A
?CDAPFN0506_WaterLevelInitialise@@3UCDAPFN_PROPERTIES@@A

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.asrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 370KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/0
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_rwdseg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_rwcseg
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pedata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.text
Size: 333KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 23B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.the_gta
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 8KB - Virtual size: 12KB

.exc Size: 512B - Virtual size: 4KB

.asrc Size: 3KB - Virtual size: 4KB

.data Size: 370KB - Virtual size: 372KB

.CRT Size: 512B - Virtual size: 4KB

/0 Size: 67KB - Virtual size: 68KB

.idata Size: 5KB - Virtual size: 8KB

.tls Size: 512B - Virtual size: 4KB

_rwdseg Size: 512B - Virtual size: 4KB

_rwcseg Size: 1024B - Virtual size: 4KB

.bss Size: - Virtual size: 3.1MB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.pedata Size: 512B - Virtual size: 4KB

.text Size: 333KB - Virtual size: 336KB

.rdata Size: 95KB - Virtual size: 96KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 14KB - Virtual size: 16KB

.text Size: 23B - Virtual size: 4KB

.the_gta Size: 5KB - Virtual size: 8KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 8KB - Virtual size: 12KB

.exc
Size: 512B - Virtual size: 4KB

.asrc
Size: 3KB - Virtual size: 4KB

.data
Size: 370KB - Virtual size: 372KB

.CRT
Size: 512B - Virtual size: 4KB

/0
Size: 67KB - Virtual size: 68KB

.idata
Size: 5KB - Virtual size: 8KB

.tls
Size: 512B - Virtual size: 4KB

_rwdseg
Size: 512B - Virtual size: 4KB

_rwcseg
Size: 1024B - Virtual size: 4KB

.bss
Size: - Virtual size: 3.1MB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.pedata
Size: 512B - Virtual size: 4KB

.text
Size: 333KB - Virtual size: 336KB

.rdata
Size: 95KB - Virtual size: 96KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 14KB - Virtual size: 16KB

.text
Size: 23B - Virtual size: 4KB

.the_gta
Size: 5KB - Virtual size: 8KB