8ec20f8ed2bc3f4cdded4db8320db148 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ec20f8ed2bc3f4cdded4db8320db148
Size

2.7MB
MD5

8ec20f8ed2bc3f4cdded4db8320db148
SHA1

521f61e87ed82d701c2adc5e510448cee419b610
SHA256

dc12507559a3efba6db8a662c7ea1ef7b3088b8c2973dedadf3ba18e91723c86
SHA512

ebd57b18ae791d6ed01641b6ca8ecdcea90ff39e8829299c55616cbb90eac960db2cc2eabb94ae48191d9a1eba09e34f8a240c636db04defdeff8790c4a23d07
SSDEEP

49152:SGORv9MxcY/qk1pmUi6AjW/MUSdGRf3/u/IabjKoh9WsuC:Y9LKAjxAZ2IabjKoh9WsuC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec20f8ed2bc3f4cdded4db8320db148

Files

8ec20f8ed2bc3f4cdded4db8320db148
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

bckgzm.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ