ef9ddb20f57f43f8a5a63451c64e3b5ef6e5d79a148c334276d8205bdd3f4602 | Triage

Sharing

General

Target

ef9ddb20f57f43f8a5a63451c64e3b5ef6e5d79a148c334276d8205bdd3f4602
Size

4.6MB
MD5

ffc8741b6ab01abbfbddfe79a7974f20
SHA1

e2f2c7dd0c6e5c13f12b73a0c1fcdcf8e8c365bb
SHA256

ef9ddb20f57f43f8a5a63451c64e3b5ef6e5d79a148c334276d8205bdd3f4602
SHA512

3dfc97715c9478f50e736997c363d91fc33ad7235056e16e91587839c8a623dd41f59c89f698506d0e714dbf558fcd9e50033f0df2536772f9bc40c032e146f8
SSDEEP

98304:mhlsqGlrV1KBj1DOASbAzYjaUuHDmk/kY2s3KfuV1F02fgwh8bactK:CdGl/KlObZujzD2FfuPF0Sg3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9ddb20f57f43f8a5a63451c64e3b5ef6e5d79a148c334276d8205bdd3f4602

Files

ef9ddb20f57f43f8a5a63451c64e3b5ef6e5d79a148c334276d8205bdd3f4602
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ