easyMalicious06a21517eca6[.]exe | Triage

Sharing

General

Target

easyMalicious06a21517eca6.exe
Size

249KB
MD5

d5bde3132c42033e4d3e10e38968e3f6
SHA1

fd034cbd251eb275a8ae4161ef78c61980442ed1
SHA256

a78d377180384aca068c7f90509a1e0f02fc7de4d3c70b4cb3d06e951ede757c
SHA512

6c09edc4b1606a6de0bc5fbd8dd80b76e71ee73ca69c263a65ca683e132177cce2f260f21362e1e4758d32ec60a363b2bc8b2b239665d190f1e6c63329139e07
SSDEEP

3072:X1B31bdBob2QXK9Y4eRZYSatoeRIfFATj1FGohi4pdQctRfwBb:X731bdBaBgY4erY7WeR+FA3/s4D9tRfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easyMalicious06a21517eca6.exe

Files

easyMalicious06a21517eca6.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ