m0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

m0
Size

1.1MB
MD5

aa5cf4ebb5a92a3714df10116d3eb816
SHA1

c644891821acb9c3ecb5dc320fef1936d6f94565
SHA256

5cd6cdcddf290b43077717ad9a6480399e3afadc5665c81d7f4df54431f315dd
SHA512

1ed35d27d1d32956775e38f337296d3513eb89329e6699cd145b0229ec1a381a60efef1c22d701e196423f0ecacacf1e5eecfae1ca7d7fd7131ef598bf910a70
SSDEEP

24576:opGSkPuMUO/ZYVAi82BgfOWrPeMLQGUCNPm30QEZhJh3uWK/Sq:EGSkNUcOV+rPeMsG/q/qhvHKaq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
m0

Files

m0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 833KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ