ef6011992b893a80f0898c0aab94a396198710c8be8abc193cb9ddc069fe5bf7 | Triage

Sharing

General

Target

ef6011992b893a80f0898c0aab94a396198710c8be8abc193cb9ddc069fe5bf7
Size

14KB
MD5

2b41ca6294a3223743a5e11d0537dfcf
SHA1

0bef57eb930a0585faf2f9c2f7c98d4093c7416f
SHA256

ef6011992b893a80f0898c0aab94a396198710c8be8abc193cb9ddc069fe5bf7
SHA512

c8f46d0de53a4812ccbc1899fa3300abe838085ec3de1d798d483be52b6ddddf0d64c3bd883a0e3adca04b1d7a4d942bae6f75abf931ef9d2466a47748d09ba3
SSDEEP

384:Rz0za/8Hdr7v+YVXuk4DoPGvI1svt04MiDE045H:RzEa07vdVX/7PGvI10tuYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef6011992b893a80f0898c0aab94a396198710c8be8abc193cb9ddc069fe5bf7

Files

ef6011992b893a80f0898c0aab94a396198710c8be8abc193cb9ddc069fe5bf7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ