2024-04-20_53003016da758d939f954976fed3b766_espilon-red | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_53003016da758d939f954976fed3b766_espilon-red
Size

4.8MB
MD5

53003016da758d939f954976fed3b766
SHA1

ebbaa30deb8806e586224348ef05d6ebdf530290
SHA256

592d962dcbcdd27b24d4b933fc0f32e91066de123b3ceff359c8420ffaa0928c
SHA512

a611cb0943a1f29c49979696c4212d35e99d7cb1778cd6bb35a1a656fe8b72b360aac2cd1812856f535b75c18fc2401c8368e6ccf57525bcedcd1e901d5468d8
SSDEEP

98304:UFpmIcMYWClN8T9cPS3I5Gp1QOrsmdeTr:UFpmInfClNs9cK3I5Gp1QisZTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_53003016da758d939f954976fed3b766_espilon-red

Files

2024-04-20_53003016da758d939f954976fed3b766_espilon-red
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28.1MB - Virtual size: 28.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24.7MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 653KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ