5c4758045b0d79c71abade37da6b5eb213f144df8a97cb5b307225bf6b0960f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c4758045b0d79c71abade37da6b5eb213f144df8a97cb5b307225bf6b0960f0
Size

65KB
MD5

95fd07f20673bfffb3477b60b9cc9ce3
SHA1

ae2982b77cebf170c7ad778574aee7ba1e699a57
SHA256

5c4758045b0d79c71abade37da6b5eb213f144df8a97cb5b307225bf6b0960f0
SHA512

a7dd9a79df0185b6006ef1ef2818b3d959563a4f6cea6a22cf33336403ef12df9273ee504fb56241aebd8d8d21f02e1c414814ebe659d13fdc2e5a572e8dfe23
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX6i////J:Zr3Z5IfQIR81ad5yX6C

Score

10^/10

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c4758045b0d79c71abade37da6b5eb213f144df8a97cb5b307225bf6b0960f0

Files

5c4758045b0d79c71abade37da6b5eb213f144df8a97cb5b307225bf6b0960f0
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE