easyMalicious0fbaa7946d9f[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easyMalicious0fbaa7946d9f.exe
Size

717KB
MD5

850340bf9e419681f0267df5fd2422c9
SHA1

a9a6d557903adeb1ad8faa3da35ae7ce30728ca1
SHA256

d704751c3381711384114a0e6498215c69e08af8c9f0d799887e5d196c1e4d7f
SHA512

6487ea490b8a5c2264b6153278bf670cf3c9724b8835a8c5d009da2cea6ce22e602838cfea5cda99823166d03495e358aebac4d8884f7d15b6b9c93ceecb856e
SSDEEP

12288:91bAvA0H5BpvD0Giv3cFGkv5h7Gu5xya3X4OGEurTm71/G0rzh94LrMk7h:91bAvfHzpr0Gycd5hSqX4OK67k0rzh9y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easyMalicious0fbaa7946d9f.exe

Files

easyMalicious0fbaa7946d9f.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ