2024-04-24_a69777cc4147a52fb544823260c43112_espilon-red | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-24_a69777cc4147a52fb544823260c43112_espilon-red
Size

4.8MB
MD5

a69777cc4147a52fb544823260c43112
SHA1

8cf982d484c0c00f33371f58d5f6d7d396b531e6
SHA256

7daeb59362b947f4993ae40052d09faa55ff6c57f8ee24bec36229d88cbb0722
SHA512

d7f98393c725eacdfcba9fac789d5ae87afd8d92e3e9021e5ec5729c79029b0ef1186be85dd609b906da812b04111c75b5b2f96eaecd26a47c318814dff6c294
SSDEEP

49152:kGSjdI7Lkbcg/Zk5e1mLjg+cYczpPdxlxvOK+8WVdqXxJIljiNO2bIz7HxBQ3pQR:+jdWScg/K5em9cjzpV8K+3qXIIIk8XV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-24_a69777cc4147a52fb544823260c43112_espilon-red

Files

2024-04-24_a69777cc4147a52fb544823260c43112_espilon-red
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 21.4MB - Virtual size: 21.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18.9MB - Virtual size: 18.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 589KB - Virtual size: 970KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 829KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ