2cec5a5501ffd0b2c1b1d4bd4bac1073004d5a8e149f307fe0508ac011f054b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cec5a5501ffd0b2c1b1d4bd4bac1073004d5a8e149f307fe0508ac011f054b1
Size

676KB
MD5

94df994670f9e2bc1fcbb50a6f08cdf9
SHA1

8a895c51c02a11582405ee7701bb0032d22b2482
SHA256

2cec5a5501ffd0b2c1b1d4bd4bac1073004d5a8e149f307fe0508ac011f054b1
SHA512

b6c597b4ca026bc7122d24c6e24dd68cddb6762a7da2a82e62987fdfbe9be44e32b4e856213f5f64f6e29a0ad0116b0666a5f8ba16163341bea29ae74991d8eb
SSDEEP

12288:SXQvV3vXaWhnqP1VNwO/XC6nKx4VUYLW5Ar01lyH3Z5HkMua:SgvV3vXaWhKJC6K6LW5ArUlGp5/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cec5a5501ffd0b2c1b1d4bd4bac1073004d5a8e149f307fe0508ac011f054b1

Files

2cec5a5501ffd0b2c1b1d4bd4bac1073004d5a8e149f307fe0508ac011f054b1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 124KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE