ed99bc19ec7d5137cd925f2d2d31aa2b4c4f008ec98b4b9cd8bb9e2910f46e54[.]exe | Triage

Sharing

General

Target

ed99bc19ec7d5137cd925f2d2d31aa2b4c4f008ec98b4b9cd8bb9e2910f46e54.exe
Size

5.6MB
MD5

ae111c7f6b3e5317ec3e428e7340c357
SHA1

71f18c44bc543b6cb5ed792f9430842dc1cf61f5
SHA256

ed99bc19ec7d5137cd925f2d2d31aa2b4c4f008ec98b4b9cd8bb9e2910f46e54
SHA512

95ba9edf6a8c55045f5840f74bc1a0a245c32a3749878d055de1e9af6c2a6945fae875d49414a3ad8314142d71ec8ec94cdbd3208514c1e7a83c780f4ff37a81
SSDEEP

98304:mQTH8zt/yCOLuH/XssxEkfLZZA4dFWku/ndG8Z7+TXYyA56xfr7mevz:pr+tdfXJuk1ZRzumTVm6B7m+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed99bc19ec7d5137cd925f2d2d31aa2b4c4f008ec98b4b9cd8bb9e2910f46e54.exe

Files

ed99bc19ec7d5137cd925f2d2d31aa2b4c4f008ec98b4b9cd8bb9e2910f46e54.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ