fc79b14398b9055cee043e0ac2fdca2516d8a25b67b35e70e27421087348af60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc79b14398b9055cee043e0ac2fdca2516d8a25b67b35e70e27421087348af60
Size

3.5MB
MD5

ccaac3067827fcbcf8c0aac0d6db6da2
SHA1

e4b2b0378615699a6da6a2fdd53d4fe4b7bbcde9
SHA256

fc79b14398b9055cee043e0ac2fdca2516d8a25b67b35e70e27421087348af60
SHA512

4df328f8d3eb5aab93857934b13db968588ce2463f49c16b828b527f7a03b6fdaba4d6bc0d5abc3e4c49b30c7644206027c437bfce81561da57b7020e703facd
SSDEEP

49152:Wfv/XRm3fUHv648igad1UUi9Gi2G+KXi9T53/A1yuc3WadamBMX:WH/b6YgafUT2GhyP/ZuOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc79b14398b9055cee043e0ac2fdca2516d8a25b67b35e70e27421087348af60

Files

fc79b14398b9055cee043e0ac2fdca2516d8a25b67b35e70e27421087348af60
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 124KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE