ebc1d825996f1c2a52aabe30b48ed950N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebc1d825996f1c2a52aabe30b48ed950N
Size

32KB
MD5

ebc1d825996f1c2a52aabe30b48ed950
SHA1

354c1ea50fa4be186687b065fdb1642f3cbf9e5a
SHA256

ffcb4b6f69130f8c9bdb7c077dfa305305422396602f2dd6875a092d35fdcd7a
SHA512

92ad0a7f5e48e8ee5c9da017bbb5dbdbe85c755b0668b5c28c8555e6d441a192614b56dd520004f7bc9178d87fcfff7df649ac03ebf45d53f19f51c8617a754f
SSDEEP

384:MIw07lRnDvTwFVmoDxRvYpXSCkChhE+1xudn5TiAt9BRgX3FGUDo1iXEK:Mp2FrwTmoTvjC0+ydn5GAX3+gUDogF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebc1d825996f1c2a52aabe30b48ed950N

Files

ebc1d825996f1c2a52aabe30b48ed950N
.exe windows:5 windows x86 arch:x86

e0ee6ba068adb3775390f0ebfb108602

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndDialog

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 911B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE