ebff6536c6a757d2899fd35e1537c9842a396a98426d00e5741e99843932b7dbN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebff6536c6a757d2899fd35e1537c9842a396a98426d00e5741e99843932b7dbN
Size

376KB
MD5

f6f621d44f4863a01dab3168958b0090
SHA1

3da03d38b65801546cb21916253e22a8455ec74e
SHA256

ebff6536c6a757d2899fd35e1537c9842a396a98426d00e5741e99843932b7db
SHA512

2a16e91b5f96277b642dfaedb8609f931fcb5e754c4d248d8bfc0e1e9951ce636441bd19a8ea5fa5b10e6adf811461fbb158ff31918f7ea601bcb2ccdab5c70e
SSDEEP

6144:nDksd6DrhpacgTGAidEl3yNhtFUCOrj0lMGWx1JSUdcWyHGIti9ONr82V7XXs9Yj:DzdB3yNhtkj0lM5x1FcKmil2t+YMFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebff6536c6a757d2899fd35e1537c9842a396a98426d00e5741e99843932b7dbN

Files

ebff6536c6a757d2899fd35e1537c9842a396a98426d00e5741e99843932b7dbN
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WinFXDocObj.pdb

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE