SPOKEN V1[.]rar | Triage

Sharing

General

Target

SPOKEN V1.rar
Size

17.6MB
MD5

bedbc7ba1351bf58b6726910f08a074e
SHA1

9a25f4082b016f185839de364e56b91aa64b2b0e
SHA256

507770775f82f09354fea36d406418c54db8e0288336a40aaf77bbabea7b1497
SHA512

f9422098ceb640340771696327964a6d187cc01703c216a25cf75eaa2529abb3f9ad679c663df0cc33442e8eaca2b71e7e2ff302b0b85f9fe89e7f2c61ad0d4c
SSDEEP

393216:fdWUKbhyaPg0w1932zlBk+JOd832kV8VK/gtfLLSDanlVmFTrRQIGi5:fdUpg0w193MBkkOO32kVv/ALSDalV8TB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SPOKEN V1.exe

Files

SPOKEN V1.rar
.rar
SPOKEN V1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37.7MB - Virtual size: 37.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ