5ec12f7b8aff4ece594404f70ccd2e66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ec12f7b8aff4ece594404f70ccd2e66
Size

279KB
MD5

5ec12f7b8aff4ece594404f70ccd2e66
SHA1

e85537d0b18a3f637e7b5878487bdfea2dbbe4f8
SHA256

e7666f57b4c1a1e6808b05dc57cd051f6339b4d897e3b3a2c8e6f295e15fbba5
SHA512

3c1cc76b4d348e89eb42115f8505dc83dd76e599935178598e167e7a9383c648153b2d822f70b6e1f7a7c90e9813faddbf983846302fc4e6e39bf96c23c3a475
SSDEEP

6144:61db49+rEg024fpLZazEjvE/rbay19tSt4bO2BaDmeBJe5920eTx1:6jkArEN249AyE/rbaMct4bO2/Vlu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec12f7b8aff4ece594404f70ccd2e66

Files

5ec12f7b8aff4ece594404f70ccd2e66
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

eska
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eskay
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE