General

  • Target

    Ex_PE_v3.1.9.rar

  • Size

    2.9MB

  • MD5

    948c008a4a732a37a2e66fc50da0946a

  • SHA1

    b1f6fd65f910118b7046f2930a4b77d682631bbb

  • SHA256

    04ec8be17e718e7df090dcd4c8297859c64e3b30738c099809895dca50ad7b11

  • SHA512

    9021333a8268d4d158beb9f5e51b12dbe5a7ac90cce95a8f6165364ed010c56bd8fc613606bba1773b388650a98a3579ebdb4d3a5d56384a7e19b058de169876

  • SSDEEP

    49152:d4EJqKNTvjjQL5shj//YeBQSIIb05bBJJgr081nmQLQlUEDTU0wVhzvZ28+1p189:6ElNTvMGigQSII45Vgr0kn30eEDAVD2i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Ex_PE_v3.1.9.rar
    .rar
  • AppXRuntime.admx
    .xml
  • Help.admx
  • ReadMe.txt
  • Sft_Extra.exe
    .exe windows:5 windows x64 arch:x64

    b7e244ba46aac2a40ea643244bcedc5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • W32Time.admx
  • WCM.admx
  • WinEULA.txt
  • Xceed.Wpf.AvalonDock.Themes.VS2010.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Xceed.Wpf.Toolkit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • halfandhalf.json
  • lockout.dbf
  • msedge_elf.dll
    .dll windows:5 windows x64 arch:x64

    e5e4f3f5367c0c82df24a4723fbd8a3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wmidx.dll
    .dll windows:10 windows x64 arch:x64

    fb8d0d572c7a4bc177a5f94662736d6d


    Headers

    Imports

    Exports

    Sections