a97a284a24b8bce558f2228a6c7bfcf0c63f0361fb13bba6cd44c01770ced0e9 | Triage

Sharing

General

Target

a97a284a24b8bce558f2228a6c7bfcf0c63f0361fb13bba6cd44c01770ced0e9
Size

4.8MB
MD5

4161ae5b30c4ed595276992f808c95bd
SHA1

06ab4569fe1264f776d762a497fa157289ff7851
SHA256

a97a284a24b8bce558f2228a6c7bfcf0c63f0361fb13bba6cd44c01770ced0e9
SHA512

f07fcc07a372e6c29e354fba41d0cb9620d7ae7d92471d4cb5ce25eeb3c52ac4ababf2a7b9332efb08219f4ff053fc9e89776f2154016e1674bc070bdae1f831
SSDEEP

98304:Yrbc0dxOfbCIYflBduQn8bp2KCVLVQeD9nJ3Yg6D:YrbcQWb8flBdmFlwLVFD9nX6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a97a284a24b8bce558f2228a6c7bfcf0c63f0361fb13bba6cd44c01770ced0e9

Files

a97a284a24b8bce558f2228a6c7bfcf0c63f0361fb13bba6cd44c01770ced0e9
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 1.3MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE