5ef5b9ee875ef1be04f9253d8316011f | Triage

Sharing

General

Target

5ef5b9ee875ef1be04f9253d8316011f
Size

4.4MB
MD5

5ef5b9ee875ef1be04f9253d8316011f
SHA1

6091d48c5058c57baadc914fd5f0ac8d27dc908a
SHA256

467d1dce4c703051c7a12b97257f22864c3d306029cea414d518725a758ca2cc
SHA512

3745065b6a0263eb80126e9e8c1336fa86768e205209e3899570fbf5eba4f3c1a8e00b1ef7a39747fcfd58909123cdc2aac00b4165c76aaa51e401bc306ffe99
SSDEEP

98304:AzhdC16XDByc3ccAIHR2qZLvQ539lWa5XprVFbJQ7wZptd:56Xwc3MIx2ALvc9l5BVlJsw/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef5b9ee875ef1be04f9253d8316011f

Files

5ef5b9ee875ef1be04f9253d8316011f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ