ef20762af765ac1397c38cdccc8b3bb13691cd8816b25f4611f4798b2d8e4487N | Triage

Sharing

General

Target

ef20762af765ac1397c38cdccc8b3bb13691cd8816b25f4611f4798b2d8e4487N
Size

418KB
MD5

25603384f4c99fde819cef8f808529d0
SHA1

51b047ca4e9996e494f201d3ec916062ef3a34de
SHA256

ef20762af765ac1397c38cdccc8b3bb13691cd8816b25f4611f4798b2d8e4487
SHA512

1ad061a972f8ea17ae54cbb9d5a4323874e73a5318960f6000d52a91c3295b09cc7ad70b781be542785aa89c78079f57ee83a7e44dc63a5fb81f3acfd8c3c327
SSDEEP

6144:utDwNlhPj9o9Z3LWZi9dxpNW0/sZ+2OFutnD0/5YA0f1xEiiAZkHhdF:KwNvK/3LuAW7+6D0/5YAw1ViAaHHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef20762af765ac1397c38cdccc8b3bb13691cd8816b25f4611f4798b2d8e4487N

Files

ef20762af765ac1397c38cdccc8b3bb13691cd8816b25f4611f4798b2d8e4487N
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mini_installer_patch_3stage.pdb

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE