359ed59b27828645d717caae6ea3db95dd00fafbe70a52f5daf4337051715d2f | Triage

Sharing

General

Target

359ed59b27828645d717caae6ea3db95dd00fafbe70a52f5daf4337051715d2f
Size

2.4MB
MD5

562324fb5ccbc0ca05ac48bc1d786730
SHA1

f63eb49745149cad45b853b8ba7364d5dc34db15
SHA256

359ed59b27828645d717caae6ea3db95dd00fafbe70a52f5daf4337051715d2f
SHA512

2e34f1c35a93af43956c5d56ef46bb85b97fd8d1d3352b4879d2294b1037dc7695bd650946d3d3049637c4ace55408131a174a584533343c204ac3b03e595d0f
SSDEEP

49152:k9+xrXOimvdMtVaXG4oirXwa3E1AI9DB6PR1zgniJfboxajTHAQnlZO:kwr+NMrUUiN3E1LhB2RuiJiaQme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
359ed59b27828645d717caae6ea3db95dd00fafbe70a52f5daf4337051715d2f

Files

359ed59b27828645d717caae6ea3db95dd00fafbe70a52f5daf4337051715d2f
.exe windows:4 windows x86 arch:x86

a7e3e5361e6838308f3f0d9da61498d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gfawin23.ocx

ord5

Sections

.text
Size: 2.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.marx
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE