poop69[.]exe | Triage

Resubmissions

22/04/2024, 00:16

240422-akgr4sdc2x 3

22/04/2024, 00:14

240422-ajdztsdb81 6

Sharing

Copy URL Twitter E-mail

General

Target

poop69.exe
Size

625KB
MD5

f3845a262f7d98d46e506eaddf62e73d
SHA1

5ebe5f5cee92d57bb46bc698c7591204cce18291
SHA256

b4e883d44081f372f1417ac3cd6733698121e5b9209fe4266818a875c1d4c345
SHA512

742e9d9dd7c59e7b0ce08fd86b8de5999ac0d644f453711f3d41cea1cdf474d741c863e54b7a0f4d1708f7e7f550b7c41dc5312cc6d9e257b48134d339eeb044
SSDEEP

12288:QLkND5t6BvD/B0MSscDZZN2VOaZLKTKEn8TS3zrpjGwJ:Q4zcDJK1ZL6LZLqKO8TS3zNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
poop69.exe

Files

poop69.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ