easyMalicious1910636aa649[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easyMalicious1910636aa649.exe
Size

73KB
MD5

0246f423cded07285c6e60c4e3ab0bbc
SHA1

e3692d0adf82cb987884292ed32da13c9ce6325c
SHA256

15c9fe7da68037815e5d5856c75a14621ba14e38db25639da9fda6e7415176c0
SHA512

55f8878c6afc94b7bf281c0c27e7e83986ce6da0789df699f1051813b8f4b8d3bdd8d70d8853d33cca8b5948c97bb38b9b636014ee3ac1a2fc43d9647efd4fd6
SSDEEP

1536:kaiqH1s+kCtrA2UMT0mTFibDKa1XFhfc6kw:t1B31bdBob2QX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easyMalicious1910636aa649.exe

Files

easyMalicious1910636aa649.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ