fdca9a959721b52f3e213dc66ec467d0d99a2c312527e87532ac6bedf51bfd9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdca9a959721b52f3e213dc66ec467d0d99a2c312527e87532ac6bedf51bfd9e
Size

3.5MB
MD5

f31e71f66919e9277a33153ef552d295
SHA1

3b14627e578e959126c26e02d708bada12c34c64
SHA256

fdca9a959721b52f3e213dc66ec467d0d99a2c312527e87532ac6bedf51bfd9e
SHA512

b30ed27ad503fca33f74d4cb58ba24ef5fa8a1c1be000f4f3d704dedd085e2698bb61dbe2d82f5a28db0e078d9cdd3dc5c4fa87080301622a230f51fed53d1fa
SSDEEP

49152:ufv/XRm3fUHv648igad1UUi9Gi2G+KX0MHG9T53/A1yuc3WadLmBMX:uH/b6YgafUT2GhmP/ZuO0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdca9a959721b52f3e213dc66ec467d0d99a2c312527e87532ac6bedf51bfd9e

Files

fdca9a959721b52f3e213dc66ec467d0d99a2c312527e87532ac6bedf51bfd9e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 124KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE