2efbd0d0369e1e68b3ff8cc950b8dfaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2efbd0d0369e1e68b3ff8cc950b8dfaf
Size

634KB
MD5

2efbd0d0369e1e68b3ff8cc950b8dfaf
SHA1

10a878877ae0d4089e6505df98a82d818c013949
SHA256

39ee340d75dd534babd203667e6c3465df5ad43928e4e9ea1942a4a1ebcdf46d
SHA512

3aff942789132bcf7d1d4b9461656aadb82c69ad6e653eb0b8baa715353e743e6f06e6ef3dd21b1664041aa326d53b40b2853bfcfe40f8922c132fb744400831
SSDEEP

12288:LtXgvZt1C5aA2KH/rvLs1ZhBb2/VXhq8mVzS7gmcbIScwlU0vNb/1oLf9X7:LtwVS2KHTvA1ZhBCNXhqpVzS2bIScwNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2efbd0d0369e1e68b3ff8cc950b8dfaf

Files

2efbd0d0369e1e68b3ff8cc950b8dfaf
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 391KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ