sam | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sam
Size

1.4MB
MD5

b29b82a257220d2d4b6b5bca35cf9c52
SHA1

91f5a4e56721466ab011fe128dd2f7b1ebd0b8fa
SHA256

8dd3192bf090c431a353e2fc3007861f2bf5ea17eedbf454e3b1e214ea5d0c6a
SHA512

4604ed08a924b087b8ca7ee6d6323619bc9184d6729a7cdf59f4bdd09517ecfeca396fc23712e6658c291d7957318eac5575f60ea8e5f4153bc510a5085ceffa
SSDEEP

24576:Qu8JzEgZUknnNzB43bz/3FDhMVGYkUmdNJhmtnjyFwTACQnMs6Fe3Fc8O:l8JqFVMEtHahQgOu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sam

Files

sam
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 916KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ