ef067abc07922a5837317441d8ff95ff4753991003a291b72179a33aa91edf37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef067abc07922a5837317441d8ff95ff4753991003a291b72179a33aa91edf37
Size

436KB
MD5

110ffaa368d9125caee406d2d610e802
SHA1

a08f9485cfd7df4c8c8a06ea711b95b35c0624b8
SHA256

ef067abc07922a5837317441d8ff95ff4753991003a291b72179a33aa91edf37
SHA512

bc543940e898c8b2a35b94485cb3cc13a0ad23947cc807131d6e9bedcf833534cb937363e12b0991c963a156653814c9adfc1b6f69da689880cd775a3dd625ca
SSDEEP

6144:mWslyPlxPDHt/OEZp19WslyPlxPDHt/OEZp19WslyPlxPDHt/OEcFvw4:glyfPDDRlyfPDDRlyfPDWo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef067abc07922a5837317441d8ff95ff4753991003a291b72179a33aa91edf37

Files

ef067abc07922a5837317441d8ff95ff4753991003a291b72179a33aa91edf37
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FAXPATCH.pdb

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ