ef919b161384435d4b9828fa879a941a77800b48d3dd09643dd3667c55b7b8bf | Triage

Sharing

General

Target

ef919b161384435d4b9828fa879a941a77800b48d3dd09643dd3667c55b7b8bf
Size

256KB
MD5

e9951e52d74eb12e49d1aed849a9a751
SHA1

d80d20c0c6ee9cecaa884fbfc9297dea2219e6ee
SHA256

ef919b161384435d4b9828fa879a941a77800b48d3dd09643dd3667c55b7b8bf
SHA512

184b471a398db5463bb8002fcf947dc1f7472468bb0f3b6d82c5210f5e965e558671211f5cc227eda918172783fc758d3d262f39801e2ee41b272fe7a5c80929
SSDEEP

6144:I07kNdATmJSLrpui6yYPaIGckfru5xyDpui6yYPaIGcV:I07knAiJSLrpV6yYP4rbpV6yYPl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef919b161384435d4b9828fa879a941a77800b48d3dd09643dd3667c55b7b8bf

Files

ef919b161384435d4b9828fa879a941a77800b48d3dd09643dd3667c55b7b8bf
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ