e5720182c17bb08dd7f3b505e10968f4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5720182c17bb08dd7f3b505e10968f4.exe
Size

322KB
MD5

e5720182c17bb08dd7f3b505e10968f4
SHA1

fc10ea5e020634fbcbd3b5adc5900f229f7930c0
SHA256

334278c0150528a0fd42e0744f1be9f635c0a01fd0c0ac842da8725b0eb61a05
SHA512

9e206bee0110d7b2f2018b8ac3db13c73e459b4abdbec6948cef15864da0487399ab6ba180440f2ba6178cbc3402468adb71384d6ffa0bbf6daa52a417ae8497
SSDEEP

6144:YiMvoAPkUEuglPB2WAAO5LBxepfNxBgwpdWTZenVU45rLmee4VAfVCM5PlJbpwb8:Yib4EuQdAAO59xe9NxBMZedBL84VA9fj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5720182c17bb08dd7f3b505e10968f4.exe

Files

e5720182c17bb08dd7f3b505e10968f4.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 1.3MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE