2024-04-20_9edc166baedbd3da96882919ba5fd60d_espilon-red | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_9edc166baedbd3da96882919ba5fd60d_espilon-red
Size

4.8MB
MD5

9edc166baedbd3da96882919ba5fd60d
SHA1

5bf816959878f71fb0a396f9fd5c5c0a92d15e4c
SHA256

e628961e499ca2ba46947210d5eabb59016413c90bc3645597381375583151fb
SHA512

c9d32de00802fcbbef5a4dad796ff044268b963a17226cead9b781cab90414d8ef6695a85df9bfa86a37f1f057cb622d4d997e1a08d55c98abaa184cd4627752
SSDEEP

49152:X0iLW61X6WjepfgtS5D+Lo4bDWpgj14VF8jWs1JDDCopURqi3LjmBWwF2HWNgIgb:bW61qW6gtq1siSELj2Y2NrYsZmOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_9edc166baedbd3da96882919ba5fd60d_espilon-red

Files

2024-04-20_9edc166baedbd3da96882919ba5fd60d_espilon-red
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 22.7MB - Virtual size: 22.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20.6MB - Virtual size: 20.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 894KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 842KB - Virtual size: 841KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ