ef58599bb28fd1f408a091fd52d44ef6c8d9f4f7cf0f79997b83ca4371dbe883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef58599bb28fd1f408a091fd52d44ef6c8d9f4f7cf0f79997b83ca4371dbe883
Size

225KB
MD5

0833dfda6fa97e99a17fe39546437205
SHA1

1b72eff50836b4ccc3110a8ab792f5c9b1e3a5e9
SHA256

ef58599bb28fd1f408a091fd52d44ef6c8d9f4f7cf0f79997b83ca4371dbe883
SHA512

1022b7c4944e35d2ea69f3ed1927c315632cd44418d511e35693021eaf9b2c23d1d5f0769e2fecc857ab78aca342c1c379c16e94e1b44831775f26d5a0a35508
SSDEEP

6144:1uJ1IZTK/5CUBjUJvMqK4/B4nkZFZJ1Asw:AIxKh7pUo4/BK0F2sw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef58599bb28fd1f408a091fd52d44ef6c8d9f4f7cf0f79997b83ca4371dbe883

Files

ef58599bb28fd1f408a091fd52d44ef6c8d9f4f7cf0f79997b83ca4371dbe883
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE