efcd56ad32e8bfb02aacb0e2c4716f50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efcd56ad32e8bfb02aacb0e2c4716f50N.exe
Size

282KB
MD5

efcd56ad32e8bfb02aacb0e2c4716f50
SHA1

b05b9187d93b330e197a8cf3ecd929d72c05c233
SHA256

025db57f42473b29baec96c7343848806c66a325e2bad4aeca06a574e7c756ef
SHA512

6b649e833482b63458437ed67185230835159f4d1ad73f761ad2f5fe64b6dbf658df681d179d8e290f2526b0a875c986a67ba2cd1e4070ea2f8f4c0f8c6422a6
SSDEEP

6144:lGuTZB2KKoEOfXoLYlVkEjiPISUOgW9X+hOGzC/:lGuTf2KmGXoLmVkmZzcukG2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efcd56ad32e8bfb02aacb0e2c4716f50N.exe

Files

efcd56ad32e8bfb02aacb0e2c4716f50N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ