d6af19894631fd076727282134402cee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6af19894631fd076727282134402cee
Size

762KB
MD5

d6af19894631fd076727282134402cee
SHA1

1d17b4876ffd9702a72c305899eed09cc1f72294
SHA256

3594c43c10dd60810dedc22f7318fb8d7d0259cde9f03d9c5286acebab687d72
SHA512

13b4c0db0f7ff5df1fe818d7baf97d54f642adb8adbe324d75c13f09fce9982d7cc1e1083d56e9759dfaeebd70888a38cfff39107a872fdf5e895ea1894fb709
SSDEEP

12288:fL31/O7/zUaVb0TC3K1eAEDZj846Juo7xy8QYS1Cc9f/DhBgsMIjL4oFbtxdEO:fL31/+/zZb0cK2DZZLQQpYMVhqsMw4o3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sber_attach.scr

Files

d6af19894631fd076727282134402cee
.zip
sber_attach.scr
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ