eW5zesd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eW5zesd.exe
Size

17KB
MD5

ace7f26c2f5610eb8f12d930234f98a6
SHA1

3a0b48d698e3b12cc4a5af6ae578283fb3347ae9
SHA256

ead585011ffb480d1dffb53093f2e7ce51bd91a98ad62dc3d9ba6960e93f1f2c
SHA512

1bf16a3c2425f3df35894c5a0bdda61a280d0597dddb5ef26fc7407ba567d1ad6ddb11801342d8a06e069cf0bc5a8fa0c5e5cf3b1fb08fbc94b2466bf5a91d5a
SSDEEP

384:VPGfcU+MTxU9LwrrrrSr6Fm95HVHT8CudTkuRdb4vDWJgncPCzYcHeFZ:R9AFm9qEnHzYcHeFZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eW5zesd.exe

Files

eW5zesd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Sietse\Documents\Visual Studio 2013\Projects\MACAddressTool\MACAddressTool\obj\Release\MAC Address Tool.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ