Eew[.]exe | Triage

Sharing

General

Target

Eew.exe
Size

322KB
MD5

a6abb244637c538d0b054d5b10c488ad
SHA1

f977dfc586006fd930e9ddab7206f6c6a7dae86d
SHA256

17874ca369ff74838363bafbebc3fd5b09be494c9e6d2c8a8e02ae828b506abc
SHA512

0b783a3c7268e3d80a31d0e23dfd90f602af68208d1cf7bf769c2be16eb72f2aef5aad99c18b5d0a4bc64891ddcde2b721e927c1023ca807ec2ee12c3b7539b3
SSDEEP

6144:8b8ZrvbzN16+GIIIIIIIhIIIIIIIIIIIIIIIU:xN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Eew.exe

Files

Eew.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ