Pole Chudes setup[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pole Chudes setup.exe
Size

78.1MB
MD5

e42f8643b9e87d4fcb273ae46cde4aa7
SHA1

44ff85dc06df858c2646834d3d577ef0348c54e0
SHA256

f88f63469c5fbe51eb1fa7ed8682aff183c1b21472524766c1001aa0d7592b70
SHA512

babf3bfef98ab660e9ee8d01c3a2993217e5a0a8493667b9d027f0020aa396ee2201d0a3f70cf0c1f738af1488e9f3bfbdf4273de31878fbad77fbc8a3155ed0
SSDEEP

1572864:I1m1JfoOPdzQzTA0Ay9FaB97xcnaKj27TfThZRGfg/8qIabUGQ8PguuTM0ZU6i:71JUzTA0H0Ltcna62ndaF9abUwPsW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Pole Chudes setup.exe

Files

Pole Chudes setup.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ