dec0fb5a4c3ac7260fe5d492477df5ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dec0fb5a4c3ac7260fe5d492477df5ef
Size

879KB
MD5

dec0fb5a4c3ac7260fe5d492477df5ef
SHA1

1f2ba616f5958eb66b1097fa605efe5e74d82688
SHA256

2c7948ff1c50e09cf206de6b756d63fac876b50a6b7fe2c891d9a8323758bc2d
SHA512

0d94da95145979ffbdfd833d65d40b62a0c4876c8498bf7772b4f8459e2bae93fc5f633fe13ea0f538f46a091bcf036df1a3b62c82d7d04fcc2358c0532cda27
SSDEEP

24576:dEDHccSccmwpAcPR5q9CwG/oyVjQ2HVGtLQOOUATJ:dm8cGm4s9NG/oydfkNOPT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec0fb5a4c3ac7260fe5d492477df5ef

Files

dec0fb5a4c3ac7260fe5d492477df5ef
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

Jiujitsu
Kukakkei

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datow
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ