seeprom_parser_win64[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

seeprom_parser_win64.exe
Size

17KB
MD5

a02023f68cd5ed49ff37cdf11d018a8a
SHA1

3bff1796a2efcd2df2d24bc2d5cd7142ba27e864
SHA256

4a2696c35b2bea8a0a7f8e81ad6876ae74dc099c76dfade5ff0762139752f787
SHA512

2ba8cf98cb33b8f351678ea6f74fa34597f03f9f3a575a1f81636a4f581c7e3218b522ef09c437abed2a1a3ff5973e593c20e3a0651a59e5fca0cfeb70f94df8
SSDEEP

384:RKoov2Uht2mCqg478FH1BNCyqAjriQQT9ZLLg:soov2UhtAFcyqQxQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
seeprom_parser_win64.exe

Files

seeprom_parser_win64.exe
.exe windows:4 windows x64 arch:x64

27f1c88409ea0d676e585560a8bd7a43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

printf
memset
fopen
fread
fclose
memcpy
_controlfp
__set_app_type
__getmainargs
exit

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ