f45d8b1e4195a96370eb69fda2372046fe1cca07c145384a0265c7ffcd50ca21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f45d8b1e4195a96370eb69fda2372046fe1cca07c145384a0265c7ffcd50ca21
Size

12.6MB
MD5

3ef03db1e16599a5198819899625d9d0
SHA1

da163d586773fa714b45bbfa24da1d53580daafa
SHA256

f45d8b1e4195a96370eb69fda2372046fe1cca07c145384a0265c7ffcd50ca21
SHA512

455625ecfde6e6cccf6606a474f2ce6e3a6674a86f12c6e5a66eaa8fcb6645e4bbc21fe1a53644fd8d2cb8f609d0ed944f0cf1323fa1422404b791167e4767da
SSDEEP

196608:srbcQWb8flBdmEk3Hpwi+NXr6FIPha0ejJswUUSPlwnDviL42BOkn5ZykP6D:sYb8HdJk3HSrDA0oOUWlwnDvMEcZyTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f45d8b1e4195a96370eb69fda2372046fe1cca07c145384a0265c7ffcd50ca21

Files

f45d8b1e4195a96370eb69fda2372046fe1cca07c145384a0265c7ffcd50ca21
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 9.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE