easy_Malicious_0d30e26e24057974db6fd6a05589f5a9dfa99991a9f884c5b26974ba6b2a619c[.]exe | Triage

Sharing

General

Target

easy_Malicious_0d30e26e24057974db6fd6a05589f5a9dfa99991a9f884c5b26974ba6b2a619c.exe
Size

320KB
MD5

cf67fe72585b070c6de2c5ac5fd59ae0
SHA1

46df61e25c0da7d360e3cc6eba99e668000c4c83
SHA256

ad791e553e277e7488a387c0c5b5bf7a3f944af431607e2979d401fc9708b4a7
SHA512

47f6c043288ff78524758ffe0cefe276f265894594602d921faf6ddc38b137cad05ba59df219fa0dfaeef41da6316d953fec33fb732a658ab7f54e53f57a0080
SSDEEP

6144:UZ5w/koY1cMPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uTs:UZ5YkoY1v/2EB0NxDIBuOFe7/uTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Malicious_0d30e26e24057974db6fd6a05589f5a9dfa99991a9f884c5b26974ba6b2a619c.exe

Files

easy_Malicious_0d30e26e24057974db6fd6a05589f5a9dfa99991a9f884c5b26974ba6b2a619c.exe
.exe windows x86

ead3bfad4a68da338d65bde308ffbe32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
SetConsoleFont
FillConsoleOutputCharacterA
HeapDestroy
FindResourceExW
EnumDateFormatsA
lstrcmpA
RtlFillMemory
OpenFileMappingA
ReadConsoleInputW
InitializeSListHead
GetConsoleInputWaitHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE