ef6ffe109e99f5293121e348e41acbaa3db633517c1644313a0e98718a6b7092 | Triage

Sharing

General

Target

ef6ffe109e99f5293121e348e41acbaa3db633517c1644313a0e98718a6b7092
Size

3.9MB
MD5

9324964686baa4bf66cb73daadda510b
SHA1

6ad3852f07500ed919765a8fd6d5115bd23f873e
SHA256

ef6ffe109e99f5293121e348e41acbaa3db633517c1644313a0e98718a6b7092
SHA512

cb0028bf15502f66873ba725f1f483c33e6eb8454cec1aea2283489345a81ef8aabd527180e323c0439ebddddefa70a9bfcc51f855eede4a0bf318bf3a8c861b
SSDEEP

98304:kY1Y4Lc7HtRN0sOGEKL+XePNlLDz9oYl3Ueu70G:j4F0suC7vdNu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef6ffe109e99f5293121e348e41acbaa3db633517c1644313a0e98718a6b7092

Files

ef6ffe109e99f5293121e348e41acbaa3db633517c1644313a0e98718a6b7092
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 3.7MB

IMAGE_SCN_MEM_READ

VProtect
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_MEM_READ