EFF7B76160E2B43F723ED55925376133[.]exe | Triage

Sharing

General

Target

EFF7B76160E2B43F723ED55925376133.exe
Size

11.2MB
MD5

eff7b76160e2b43f723ed55925376133
SHA1

214c8c0b3d7c898e415778985d7ce11da7615da5
SHA256

8c8bc051a42578631ab04380a0daef57e67abd8cf1a272e75213285929a74c5e
SHA512

58cc3b35376572f6bd10a59cf24fb45a5f13f40f8052b8b7bd7d1032b7e4f9e1a4624242e6281458fd0e829df77e7410cf037ddcb1461dccedc640494e74df2a
SSDEEP

196608:qW6EaHc9MZoA6Sv1A9d+EMep3MB8dNcb:563Hs5NbMe9MubY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EFF7B76160E2B43F723ED55925376133.exe

Files

EFF7B76160E2B43F723ED55925376133.exe
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ