easy_Benign_ffc672cc2a29d68c1fe4fca1f22badddedced3f9f98b61a8dd8b1bd5c1209523[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Benign_ffc672cc2a29d68c1fe4fca1f22badddedced3f9f98b61a8dd8b1bd5c1209523.exe
Size

6KB
MD5

fe34469a5156641872bd8afe9309ff2f
SHA1

f61e4ce4fdfaafad5129c12b6b7bcb969f9cb283
SHA256

ffc672cc2a29d68c1fe4fca1f22badddedced3f9f98b61a8dd8b1bd5c1209523
SHA512

bced4fcf924e9ad4b9a46938665306b7ae48efac48869c50dd2f21a8ff5239a78a6865a003b25d2f49e7f686d5d6422c966506f9b56cf1e9830638180cb9b251
SSDEEP

96:0qcFHE5NLrI3yXiwfk8j+do0AobO233qA:oFHEHG86f339

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Benign_ffc672cc2a29d68c1fe4fca1f22badddedced3f9f98b61a8dd8b1bd5c1209523.exe

Files

easy_Benign_ffc672cc2a29d68c1fe4fca1f22badddedced3f9f98b61a8dd8b1bd5c1209523.exe
.exe windows x86

1d6025a5a989eac921e6dffce5026569

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
malloc
printf
puts
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE