aef07df4f8303256f342bfaa85e6d00b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef07df4f8303256f342bfaa85e6d00b
Size

184KB
MD5

aef07df4f8303256f342bfaa85e6d00b
SHA1

2318305b313542bb8efb8db51ae0eaa4c6c1d945
SHA256

261002aab62e0f06df5b09f0a81ad2311d294ff8760bc59bc5fa08c930ccc0d6
SHA512

124052d5944e4c40038288c81b3d67405d2058d97071d0b0ebe18dcab3cc8c3402c7e1e05bb26852dfe8d79a568ce3d9240614b0b30365586917cb85e21d98e6
SSDEEP

3072:7gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgfdA4l:+PFkq6zOe5ilSanOUd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef07df4f8303256f342bfaa85e6d00b

Files

aef07df4f8303256f342bfaa85e6d00b
.dll windows:5 windows x86 arch:x86

4a4882bc1b5b7458d9aba22e8f9b9b31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

gdi32

GetFontData

msvcrt

memset

user32

ShowOwnedPopups

oleaut32

VarBstrFromDec

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ