ely[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ely.exe
Size

7.1MB
MD5

35ea45299b61bba9fc6e2ea47afd9d60
SHA1

0dfeaddd59e4f14172b5092604c0eb170fbed284
SHA256

29817718b5405521a8d13e2b433b8e1407fa8fc58b0a7c186e180b89fef0d27b
SHA512

a168f5e226b5739a2f8273b83813949345d94bf187c20ff6117d08562e5ee4a687e6a8de8fd13a50871c237c666b8e976192b8773e0d13106d976e8692de1971
SSDEEP

196608:Q20YXS6VOZTpFMYsz34HPYsz34HqQfCA+vuwhc3yc2Uw0bNtJH1F:h0YXjVOZTpFBsz3kQsz3kjZwhc3yc5wk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ely.exe

Files

ely.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ