xEPYeKsYHBbLZGr[.]exe | Triage

Sharing

General

Target

xEPYeKsYHBbLZGr.exe
Size

25KB
MD5

6f5a58aea469d4e95eb995bbfb0434ff
SHA1

5ed0ea37751ffa1bd2654ca68c3efb37a7751599
SHA256

0306e132e4dc643712efacee5db4e2c781b9ae221be63502d0af23ba27cc6f0f
SHA512

7854c834d7a08be8a4c0570f0224ce74291c5a4df56c7db2dbb1ac84fc3515986279600a39c935b32f78a78fd8827c3035e0c1c64fae97130de44824fb4d99a4
SSDEEP

384:HgQ//5uMxXvq4H4aFc/QiLpPcsoyYIEo:AQ//AyXttc/gEYXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xEPYeKsYHBbLZGr.exe

Files

xEPYeKsYHBbLZGr.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ