General

  • Target

    a-gfwrm8.7z

  • Size

    9.2MB

  • MD5

    040c747fad2268c746b2017ef6b536ca

  • SHA1

    c476747ae25e215ac25222a22bda82d9a54c1143

  • SHA256

    6b9d056b50577252de67854248b6ea9aa6fa77fc65cf2243372c9a91861987a1

  • SHA512

    a00b6230a4d3f99d7fa3f684f304cd35ba9dcf6d70c9d725704bd68d4ffafce230a1e5a6c5a24a29127580cd078ac12152e3733642843c93fbc644e3fe09aaf5

  • SSDEEP

    196608:WS9PqjBvc+WGtdvE2maOHU5B2Z1tQwIMVr5pKYYItTkodTjId4td27GMzr:jCjB0OpE2NO0j2Z1tDIMtLSICbdrGMX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • a-gfwrm8.7z
    .7z
  • alias.nfo
  • files/garfieldWR.exe
    .exe windows x86

    b654900905be998e61425e6b5dc30db5


    Headers

    Imports

    Exports

    Sections

  • files/paul.dll
    .dll windows x86

    3cba9409e4cef8029c70f0fdcaf9bec8


    Headers

    Imports

    Exports

    Sections

  • files/rld.dll
    .dll windows x86

    373b9bcb510910a35da6bad2c7250681


    Headers

    Imports

    Exports

    Sections