9c0b66f15f82d67307c8d7952ff8891b9f6c752c5957aaa0f240addb16aaa6ca | Triage

Sharing

General

Target

9c0b66f15f82d67307c8d7952ff8891b9f6c752c5957aaa0f240addb16aaa6ca
Size

490KB
MD5

b927d566ae6e7fa8356eae37f5b28e96
SHA1

20868e0c52de4e3e4f3a1547b34fc5916aed29d3
SHA256

9c0b66f15f82d67307c8d7952ff8891b9f6c752c5957aaa0f240addb16aaa6ca
SHA512

d2290fea7c3abea404d1adebcb2186b607296888ac71b55306a66f98577c776dcb07fc008cfe454bd6ab36f58abb57506947d6c450f5b30abb80a55cd7389760
SSDEEP

12288:lQkrzEKPRM8lLhlAnZiyM2YW5A+5n9tmWUdY:lTzpRMdnhYW5Ain90d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c0b66f15f82d67307c8d7952ff8891b9f6c752c5957aaa0f240addb16aaa6ca

Files

9c0b66f15f82d67307c8d7952ff8891b9f6c752c5957aaa0f240addb16aaa6ca
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 128KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE