803fe2b9e6508381b53aa3ed71fa44136e3c87108dd6c8a4476625708dd9fa12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

803fe2b9e6508381b53aa3ed71fa44136e3c87108dd6c8a4476625708dd9fa12
Size

352KB
MD5

0e193d3c65b6909fd98321b53d9aa515
SHA1

14099a5217c637be13bdd7fe6ec93e30c6d30dac
SHA256

803fe2b9e6508381b53aa3ed71fa44136e3c87108dd6c8a4476625708dd9fa12
SHA512

5bab688fa943e191de119bdd6865db933716c76cc048f0573bff62fdeff5620002bb19e532115111edcba5daff6e71ef0c5a6c036c48e3718374e09e199ae7c4
SSDEEP

6144:h/4Sqreykb+xJAtt2fAER5L7WvKqrTp5dQxJnr6WONLbm2VpzFR6d28PvuSrdguZ:h/4Sqkb+gN6G/r4lGWgbm2VpvQ28HuY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EdgeTools.exe

Files

803fe2b9e6508381b53aa3ed71fa44136e3c87108dd6c8a4476625708dd9fa12
.zip
EdgeTools.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

~yT@jp8
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ