c7de3dd32088052b40fa8586e7c4fdea05dc4f6b922b4db87934aa8557acca7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7de3dd32088052b40fa8586e7c4fdea05dc4f6b922b4db87934aa8557acca7b
Size

65KB
MD5

920eb24016ccd79f7ce7f8b0a5df94a7
SHA1

071a868b58e38f6bb24c89e34876c6f61fd6e3cf
SHA256

c7de3dd32088052b40fa8586e7c4fdea05dc4f6b922b4db87934aa8557acca7b
SHA512

c36cf03f99f50326a4020dfae907941ed72972b8d7cbc36e35b15df11f16999cf8d1279febaaf3a5a0c88097fd03877cf9c47e97a0828dc63b9cc5d0b532f592
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX66:Zr3Z5IfQIR81ad5yX66

Score

10^/10

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7de3dd32088052b40fa8586e7c4fdea05dc4f6b922b4db87934aa8557acca7b

Files

c7de3dd32088052b40fa8586e7c4fdea05dc4f6b922b4db87934aa8557acca7b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE