ef5218e582b085ac6d6601ab29859050N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5218e582b085ac6d6601ab29859050N.exe
Size

1.5MB
MD5

ef5218e582b085ac6d6601ab29859050
SHA1

7c548a7b60519bf7ee458539740598015cea45e4
SHA256

1ed493a2c94e40c44878592936ed367c2c88b6558b058d433eb1b94d4d36b8a9
SHA512

ac51ec862b11a211aaa18adcce74338c7b1db6adbe35074f5ecfba100ec8a41cb2679375c84424120ff6c2a08e953f05c05bfd65dacf2dc118572189d7851595
SSDEEP

24576:8RGT4Ph2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWtec+fwv4cXce:8RTbazR0vKLXZnec+Yv4cXcy6l6mFnda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5218e582b085ac6d6601ab29859050N.exe

Files

ef5218e582b085ac6d6601ab29859050N.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ