f57ccf9493c1e1e62940169f84bcf89a399a74e6c6c4984bf21567700c39620f | Triage

Sharing

General

Target

f57ccf9493c1e1e62940169f84bcf89a399a74e6c6c4984bf21567700c39620f
Size

3.5MB
MD5

4ff473a89ee1bbd446de8269f7083522
SHA1

893a91a1af9903b8cfe583316dfbdaba6a08cdde
SHA256

f57ccf9493c1e1e62940169f84bcf89a399a74e6c6c4984bf21567700c39620f
SHA512

1833f752fb73ca15c26cd85065b9c51463553af6cb1d708441ccca406da240540844022cec84438197d02ffd2ff0f510ac1bfe66954b5cb0ca5bb045deea0987
SSDEEP

49152:W0+0OlHCNMSkvHc5Iot2j6TyR+w2V++cHdT53V5HcTM2zDMa:WRnvHc+otc6T22VEHvVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57ccf9493c1e1e62940169f84bcf89a399a74e6c6c4984bf21567700c39620f

Files

f57ccf9493c1e1e62940169f84bcf89a399a74e6c6c4984bf21567700c39620f
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 124KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE