aaa00e0c5091818ddf6d01547f398628 | Triage

Sharing

General

Target

aaa00e0c5091818ddf6d01547f398628
Size

7.9MB
MD5

aaa00e0c5091818ddf6d01547f398628
SHA1

28477389d19def4282a654c13360a462b443b49e
SHA256

157352adfa1ad8b40c6709a9f84a4a0d9aa6e70f9eac53af5d409271849014be
SHA512

afa0f1d8ff1f462d6045ad28e3ebc4bc25250a4ba20da03851f93da0c89a9df877c86394c948411c27dcd942a689389fe1c6b8863b903c8c6ff206dd30221612
SSDEEP

196608:g6lPYw/CsXDjDyfuL2WliXYrHW1LJJcnSQQGtiiEdsG:ggP3CEDhL2ciIrHWRL3itijd

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

resource	yara_rule
sample	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa00e0c5091818ddf6d01547f398628

Files

aaa00e0c5091818ddf6d01547f398628
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

BPX0
Size: - Virtual size: 204KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BPX1
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OwlSpammer.pyc