easyMalicious0e279a136b3a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easyMalicious0e279a136b3a.exe
Size

284KB
MD5

99fb51bd2ef2512cae0b24d3a4a55271
SHA1

a6e0e3a2bcf5fe1e2d30bf734d833432154550ad
SHA256

bd02bc64bd20f28565ad2f9022bde3daf2848b70f53a89f9e6c5959108a0a1ce
SHA512

f6009017c83901ef5bbb9230e05dd8cc481cf3a2dc4edbba36c69129679205f0cea931f3951772d14b86ea45ce0f6137dd96d8921f40aa7311e01c0055ec6dd6
SSDEEP

6144:t731bdBaB9TqFME8f+/mFibDlJIqe0f5vj0Pod2/r8S6yHQtWUbOekR:91bWqFMy/mFibHi0f9gPocIbiWkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easyMalicious0e279a136b3a.exe

Files

easyMalicious0e279a136b3a.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ