ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN[.]exe

General

Target
ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN.exe
Size 79KB
Sample241113-v232wswejf
SHA256 ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895f
MD5 fd9acb505f614eb192d972928c07b630
SHA1 a6583b615b1f979065f1743e43ff41cdacd8b129
SHA512 56274d2a85e8ebdebcd9175e6516a84b8b33a15947b06b3c8f8a0af959b2a3c8f4eeeb4ebf6bd598227f3705f45a8f5580cfa33ba1e9dabe740b2cf8a1b7fe9f
SSDEEP 1536:NVM4rJQlFS2yicbWm0/L3d8pFHTW7RQoRbRUs3cO57OWxXPu4b:L6pfBLkHTW7eolj9puE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN.exe

File Explorer

ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN.exe

.exe 79KB

ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN.exe

SHA256 ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895f
MD5 fd9acb505f614eb192d972928c07b630
SHA1 a6583b615b1f979065f1743e43ff41cdacd8b129
SHA512 56274d2a85e8ebdebcd9175e6516a84b8b33a15947b06b3c8f8a0af959b2a3c8f4eeeb4ebf6bd598227f3705f45a8f5580cfa33ba1e9dabe740b2cf8a1b7fe9f
SSDEEP 1536:NVM4rJQlFS2yicbWm0/L3d8pFHTW7RQoRbRUs3cO57OWxXPu4b:L6pfBLkHTW7eolj9puE
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

204803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ajelhf

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ef1ecf892aa435c0a0c800da88fd59d5396200446d4e684f9bf638b789d1895fN.exe

generic