ec2a972ac77c38587b72a8ee7e3fc430N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec2a972ac77c38587b72a8ee7e3fc430N.exe
Size

112KB
MD5

ec2a972ac77c38587b72a8ee7e3fc430
SHA1

25c4be4820b959e39f6180c3c5b4078b5ddeadab
SHA256

bbf978b63c151ad6ca4104ef9534d5e90edaa0cc46f6a2c7f9bf9ceba3737aeb
SHA512

c611dbe793cfbd09c32a19289c56978420104097e84001eeebfabf9891192199a22bb49511ab1823aee3c7ff82879a63024b1a4d395a551eda6f585ef5009695
SSDEEP

1536:5SnWZRXC7YS3MTYrvUZrT4FUJN5UZA4QHuWaY13ukWrJa:57NC7YS4Yz6v4+8AXaY13unrJa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec2a972ac77c38587b72a8ee7e3fc430N.exe

Files

ec2a972ac77c38587b72a8ee7e3fc430N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ