aceaeb2302148292bff2ee5056f1b598 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aceaeb2302148292bff2ee5056f1b598
Size

91KB
MD5

aceaeb2302148292bff2ee5056f1b598
SHA1

f747095bc02feac5df6f06a4f434510a3b140030
SHA256

a0144349b130e94893248d089d4bc75d08527e1dd37bc55741bccfc90b6d02bf
SHA512

aea7ade7979d8b3aca956d73fae3bb091fd72b3038b989dffced0c6012007cdce16dee94189a8581abce5bafbb8d4c2bd658c4aa229e87a8562465db4859711a
SSDEEP

1536:KUnVN5HOHUEs6iqcuyIJ4fnb07w3317NIf8n5zBWOurXjBCl9b2WGA+ZetAoSaCw:KUnLYCq/Fufnb07YO86X7jcl8WMtaCw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-RUSSKAYA.exe

Files

aceaeb2302148292bff2ee5056f1b598
.zip
GOLAYA-RUSSKAYA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ