da0d6383812f79bcfad9afa9c02b83232121457379978f97955a90e3223c2c9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da0d6383812f79bcfad9afa9c02b83232121457379978f97955a90e3223c2c9d
Size

5.3MB
MD5

13ce85ad4dc760455304ed20016e50a8
SHA1

2c9055938a69cf19729a5925dba4d7a3656de6db
SHA256

da0d6383812f79bcfad9afa9c02b83232121457379978f97955a90e3223c2c9d
SHA512

707ee03f051b15c52daf61b1601ae2551ce9ef9d4a37c95151590a276c8ada6a73353f620f9ef5b11ef3c3b57c2b5ff40a896e2a78ba3c06dda98117d5a03e91
SSDEEP

49152:VFjLjeUW036xOSh53+lzeNr+om8e+75TQUvDEBEeWFr5Z8p:VRLLwD+Sr+bTsUIEmeWF9Wp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da0d6383812f79bcfad9afa9c02b83232121457379978f97955a90e3223c2c9d

Files

da0d6383812f79bcfad9afa9c02b83232121457379978f97955a90e3223c2c9d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 980KB - Virtual size: 977KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 116KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE