EBUKA FILE[.]exe | Triage

Sharing

General

Target

EBUKA FILE.exe
Size

52KB
MD5

8c3b03137c108a4803a5530fd9285c17
SHA1

24f8f3dfe74dd8196f1e51a53f9c88ee2d0ac291
SHA256

58185723351f7bd9e47b77fe7727f3040677187135e735f9edb943f2ab93ee74
SHA512

18f5134c22408131e4f050bd01f0d823fe8bed8fbd9ab97f62c2d88146442b9af75d2c1a892ac2cff585a727d20799e5eff1b6d12efeed736a78ed6393246ecf
SSDEEP

1536:GdTU28JNrWnVp3Qp6RE6dD7Ux1qnsK19TAOJGlX4ti9h8Vh8XmCLBG4ubV1vUSox:Gh6om0Ii+MXjnvc1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EBUKA FILE.exe

Files

EBUKA FILE.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ