bfae237a68a7809a44e26d31c8fdadfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfae237a68a7809a44e26d31c8fdadfb
Size

78KB
MD5

bfae237a68a7809a44e26d31c8fdadfb
SHA1

81d9b3b242cc15325ef7bf72c269e7cf86a9776a
SHA256

496cf6a700dc1061ca9f6f748e118decd8563bd043e720bd137ef773bf7dd872
SHA512

0f32b60dafbf85a9a42f28ced3a9a5c179550904ed1414854d9cf03b1df78f7c780fedf37bec6ba3792c1ee02e26ad5d2d0b8d8f4df18a128ae60fa80b1da2b3
SSDEEP

1536:kQwfwimgTY23tG90wIsWfHlWKSd+QSqWU5FJ2hZ+cYS4BHKFJtBf9ntlsp0OV:knoimg13tG90HdQ3Sqtlm+VSFJ/lntlg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-TOPLESS.exe

Files

bfae237a68a7809a44e26d31c8fdadfb
.zip
GOLAYA-TOPLESS.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ