0fd7230f5711049cffc8cabc96348a08549c12f343cf8c1e7c5f759fb51c0d5d | Triage

Sharing

General

Target

0fd7230f5711049cffc8cabc96348a08549c12f343cf8c1e7c5f759fb51c0d5d
Size

5.6MB
MD5

5db5bc3be9886711470e9735b6419de7
SHA1

5699ed7660463c98adae908cafa5e9fdcaf65816
SHA256

0fd7230f5711049cffc8cabc96348a08549c12f343cf8c1e7c5f759fb51c0d5d
SHA512

ef4175755d12f5987718ab619841707a05600fb8f9040781cc010b0092dc626a76714a9d7f4a396a568c1e885151f8ea420b03bb338d55db538367abce3f8e12
SSDEEP

98304:wrbc0dxOfbCIYflBduQn8txtfT9SN8Nvaf6JE/yMIKYGM:wrbcQWb8flBdmL1T9SqE6e/yvWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd7230f5711049cffc8cabc96348a08549c12f343cf8c1e7c5f759fb51c0d5d

Files

0fd7230f5711049cffc8cabc96348a08549c12f343cf8c1e7c5f759fb51c0d5d
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 2.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE