EFT Bekozzzz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EFT Bekozzzz.exe
Size

656B
MD5

e26702c91dbd0cf1d9251792af40bfad
SHA1

4b9c53a10e6f16ee4caf810c2b7ad2ebcc07d401
SHA256

5fcc3a4ecdb9e1b5f373c7a1895b6d09ea31a063d76f1bb12df28a8641d2484d
SHA512

6d1b87062ea60dcd6986527c7eae08406e56f16c895efd1b153f76a837d78920a7216bff1e8e20b65171cf22f2e94ab2c1ab8ee67211ebc9050011d20daca85c

Score

N/A

Malware Config

Signatures

Files

EFT Bekozzzz.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ