ef0c576a4f99e14ec097a002d7d86af0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef0c576a4f99e14ec097a002d7d86af0N.exe
Size

5.9MB
MD5

ef0c576a4f99e14ec097a002d7d86af0
SHA1

ba1e5a20d86c69f2c94ea4c71bcab0edff9ba3a5
SHA256

2947668adba91c46d5b6c2e0886a8d56d555a224a11982947e6fe25e3b3c09b7
SHA512

40fea4f48cc9e30c26f27847d471b30b16ce21ab99278c3cb4301578515cd7cd04a627c2942f4ca6cd4aa20804ea744c71807831e09f9b548f43a3ae88c88f9e
SSDEEP

98304:I0E8Yg9fyZLmz9tBYdbIWf1psY+zR/iTYE/vzoX/umKnaucj+X/QMJ:I0/aZLmCnRK/iTYwvkvuaue+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef0c576a4f99e14ec097a002d7d86af0N.exe

Files

ef0c576a4f99e14ec097a002d7d86af0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ