2024-05-30_a969ed8a88fc64e74bd8655e98528296_megazord | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-30_a969ed8a88fc64e74bd8655e98528296_megazord
Size

2.9MB
MD5

a969ed8a88fc64e74bd8655e98528296
SHA1

edd3c82389326e8519d079c787919f98b31ad4aa
SHA256

38e1a3199b441de0d22614bd0e3889a339043b0519c17bb2d3e45d1a7d568d6f
SHA512

e3d5f1d6fd6205cae0bf66086443807e082df6d32cc4c8c90dff150422f40ccf980fdac7890aaa508a721c300d8f6c71b472d7fb189a2c029f168ef1350e2ca7
SSDEEP

49152:o8yJAyXtM2aDIs9RCPrpxafv0biRlGKMnoQBGBvpVEgBgPWNlBut0ax8tj6AvHnP:vSZ3lurPw+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-30_a969ed8a88fc64e74bd8655e98528296_megazord

Files

2024-05-30_a969ed8a88fc64e74bd8655e98528296_megazord
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 421KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.managed
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ