4654D13A[.]efi | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4654D13A.efi
Size

50KB
MD5

0b8ac9ccab62239f8c8c74e4bb9e1906
SHA1

aae8332d24e75953951eb5ef8c2a33c4cce3adee
SHA256

273dc63a745de3482368b7556eff81404ffa655f4c81345be7236d9eed8883cd
SHA512

23eb6ece999d6071c53a71938d24115a974d5d5356f9fd5be91a6bd244e726d80e0cad560bb0e0b4dd69692108b24e08fb632f2e5ed33b9032fee58899be9c87
SSDEEP

768:VdJsNCI3SvzATFTTKQj7fxdOA+Ri7I242aeB8KCcg/LM2T0y:nPIivzATFT2Qj7Sgccg/I

Score

N/A

Malware Config

Signatures

Files

4654D13A.efi
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 64B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ