ewrewrewdfgwef[.]exe | Triage

Sharing

General

Target

ewrewrewdfgwef.exe
Size

544KB
MD5

de3a8dabeb60009670608f78c45ad9ff
SHA1

368f3a993d7243b793278095518398632fd4ce9d
SHA256

3b25bce928fee5204375ac805554a6c01a3f3ab7f0693cb2222e9cb6e351540f
SHA512

de7b2d335914522291e6569b4322bdabead9af7ce47d54f0b690df601dfebbda3fc3710d46266d127348b2d87e60beeeef67c3ccc171821f27a0d1c0522dfbb1
SSDEEP

12288:wDRryFot2wkda7Enp+NxMq25vgaSoeKAiepmGKdhj:eyFoBkkAnexMrdgLolmIGOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ewrewrewdfgwef.exe

Files

ewrewrewdfgwef.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mprime\Desktop\Farlight84-Simple-EAC-Bypass-main\obj\Debug\ewrewrewdfgwef.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 429KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ