ef6ea81fd46eea7611f49d2f5ed335d3[.]exe | Triage

Sharing

General

Target

ef6ea81fd46eea7611f49d2f5ed335d3.exe
Size

393KB
MD5

ef6ea81fd46eea7611f49d2f5ed335d3
SHA1

4990c82f90046b9b6d11d837fbbe516e74802a91
SHA256

49eddeaab9aead5ecc9024f5dcf4b41d34defdabdabdaefec279a9eda39182d3
SHA512

470bd52dc0e990d6360ab084e33abaf69204114211acae263958c6c08d01799b122a811591c865599138b67877016fa460998f4ae295bedbcc5da235a65d1449
SSDEEP

6144:YTwxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7Pz:Dg7dUmmLen1G6Lkjr7plWzuDRsVqdkY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef6ea81fd46eea7611f49d2f5ed335d3.exe

Files

ef6ea81fd46eea7611f49d2f5ed335d3.exe
.exe windows:4 windows x86 arch:x86

3096b0196a628b3d2926320415b4f2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
CloseHandle
LoadLibraryExA
GetACP
GlobalUnlock
CreateFileMappingA
GetModuleHandleA
CreateFileA
LocalLock
WaitForMultipleObjects
FindAtomA
FreeEnvironmentStringsA
FindClose
GetConsoleCP
Sleep
LocalFree
GetLastError
GetCalendarInfoA
HeapCreate
TlsGetValue

user32

DrawTextA
CheckRadioButton
GetDC
IsWindow
DispatchMessageA
GetDlgItem
GetIconInfo
SetFocus
DrawEdge
FillRect
DefWindowProcA
CallWindowProcA
CascadeWindows
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
SetupCloseLog
SetupCloseInfFile
CM_Add_Range

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ