MBR_UEFI_Note_Builder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MBR_UEFI_Note_Builder.exe
Size

1.6MB
MD5

4a371eb735adb9fc8b17918c1cb5e304
SHA1

f0932738c2f832d9010a44e86d13b128d6049d42
SHA256

77ff2e744df0ea1da19661618d6775a5201fe122fdf1e89b3fe71640bb2ca30e
SHA512

113683aacba40eded7b2c888a080b9bc1aaefc6ad799f7b31ac1cf7ec3f6e721e4e3f7825b042c4f101a4e61020d6a3f6a475ed6c71bafce5419696774af9258
SSDEEP

24576:l7W3FrRj0ewC/I1BtA8blfVV8TAmW4zcDJK1ZL6LZLqKN8T630SGG3:l7W3F6p13Bbl8TAf4wYkZmJT63VGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MBR_UEFI_Note_Builder.exe

Files

MBR_UEFI_Note_Builder.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 782KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ