ef5f8835925a49b6253fafb22e96d43f44b62424dba1590711ca8d56cdb1c3d2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5f8835925a49b6253fafb22e96d43f44b62424dba1590711ca8d56cdb1c3d2N
Size

96KB
MD5

61c3e28a33276f1db6c6daa5c54def60
SHA1

81fcb7b6ab509da7081c5e9e3c6c7d1195646bce
SHA256

ef5f8835925a49b6253fafb22e96d43f44b62424dba1590711ca8d56cdb1c3d2
SHA512

1879141235e6f5a990ae87708042b1fd2b2688dcf2cf990f94e702a5c3ae70e5d6e4e635ba7720ff0548f2baa0e02213f112bb9a4f2fc65390cfc88e59ff75e7
SSDEEP

1536:3o0bcwB4kjU7qbwY9OiEh0Pc6ty1OXyGuiRZFeeSQLvL3zWhEm2PAh8AbtTDAb:FRmmrcAmhkt3mkZsQ/3zWh92YZhDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5f8835925a49b6253fafb22e96d43f44b62424dba1590711ca8d56cdb1c3d2N

Files

ef5f8835925a49b6253fafb22e96d43f44b62424dba1590711ca8d56cdb1c3d2N
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ