EPDA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EPDA.exe
Size

637KB
MD5

f192b295d888740f43dba9b044198eb6
SHA1

339ea7591c5628cdfd687e1dfacfc168e312371e
SHA256

c6210dcf361f7262cf37010424bfc6577e23dbe34275c63a3152fef63885d0a8
SHA512

a54e806a008ea7481225e4e4aa5fb1dffd38ebe794685ce39f578f38ba1488679de7113637ad8205119b85899f86b75fa569f7aa827b27df90d5144595cddcde
SSDEEP

12288:cPYPfY7rZf6XpxJaOfoNYPne/AZV4j5PtV8bLRK6sRT7cNkcWPIJUe3esPe:cPYPgcJadYP4dtGbNKTRUycWPIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EPDA.exe

Files

EPDA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ