ECNO-E2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ECNO-E2.exe
Size

203KB
MD5

45c2269b3aebee00735a81fd51319c6b
SHA1

547c38f3645e80a86eb60ae818783875cbc986aa
SHA256

f7e868fad6c8971fe66b493583d241eb10866d39c1c651e6588d2023c0e0e7f5
SHA512

a44d86c8c9198222c8eb986dcbefee50f8fb960e20fc7b11cc3653a54b0093457bc623ac8a31d479a948b50d8f133c288ceef7ffa0d76c4ccef1a5831da67d74
SSDEEP

3072:dI0nPvatfJ7MGVFUaD9i6RAQqf5aMXT5m67RpexEzJ/G6M4kfj6n+RHcHr:dKt57F5TA53XTE47exEzJKjRROr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ECNO-E2.exe

Files

ECNO-E2.exe
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qwpu
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE