efc95329f77bfa54c5e919e8afe7d29422b857aafb1b252c196d24c8e86256c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efc95329f77bfa54c5e919e8afe7d29422b857aafb1b252c196d24c8e86256c8
Size

1.6MB
MD5

5c0923c06be7055ff77b2c03fecd0666
SHA1

b45226e6f73affaca2205262dd98811254d1b555
SHA256

efc95329f77bfa54c5e919e8afe7d29422b857aafb1b252c196d24c8e86256c8
SHA512

40a7aad011bf663d1c3196365b1fe6343d40f04bdaf2f4963af5a4058b59c51b04f02ec910af56c5197ea84302e9d382de6cd10004c749d3c06231efb7ae4e5b
SSDEEP

24576:B2IYQwZFrCile2s4TcVpxjiJC+hOIdWJuhItfULR5iSBfy1rrnTLM:fw/CG7s4euJCpJsItfUN5iSt+rTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc95329f77bfa54c5e919e8afe7d29422b857aafb1b252c196d24c8e86256c8

Files

efc95329f77bfa54c5e919e8afe7d29422b857aafb1b252c196d24c8e86256c8
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ