dc7a5ae0d8d7a674dcc71d3b52f64ed034dae3074754c8c9dce566eaabf52194 | Triage

Sharing

General

Target

dc7a5ae0d8d7a674dcc71d3b52f64ed034dae3074754c8c9dce566eaabf52194
Size

65KB
MD5

413ef3d98dc62de897418c4f1a8c38b1
SHA1

edf7932600addc20b9afdd07c253412e9559d78d
SHA256

dc7a5ae0d8d7a674dcc71d3b52f64ed034dae3074754c8c9dce566eaabf52194
SHA512

68b0049eaa74b65ec83a4f83ebf035a0e5b9fddb32b39e49245e3ec5d9423ef3820551887052d3e84a71fb864f46f50d777207eaab81d4dd65c5f9351c71f59b
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX6f:Zr3Z5IfQIR81ad5yX6f

Score

10^/10

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7a5ae0d8d7a674dcc71d3b52f64ed034dae3074754c8c9dce566eaabf52194

Files

dc7a5ae0d8d7a674dcc71d3b52f64ed034dae3074754c8c9dce566eaabf52194
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE