easyMalicious30da0949120f[.]exe | Triage

Sharing

General

Target

easyMalicious30da0949120f.exe
Size

222KB
MD5

22199a8b6eb14398c0ac07dcec0e366a
SHA1

491ad69bceab18807eb60874a00c7a82744b43ec
SHA256

e43d63151834e384a7339a4688d2d0b235b76dad1e5201a4ea2587bcce782955
SHA512

4d7dc1698dfea1dbe642a36ea31b65db75fcb9f790bdc8c069af8d8f66760c29aebaf26d81137026a6382936971f6de796e33a984fa8c84b562f21f2dd30eb1d
SSDEEP

3072:11B31bdBob2QXKOPsNcFh4JwKfK+/x7L3qnzdrfUaNV6QdrSOmoRr74n:1731bdBaBbP4NQ+1L6zd4SFiQrU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easyMalicious30da0949120f.exe

Files

easyMalicious30da0949120f.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ