000ef5fe73b9823f2b19f2cd2a6b2e52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000ef5fe73b9823f2b19f2cd2a6b2e52
Size

298KB
MD5

000ef5fe73b9823f2b19f2cd2a6b2e52
SHA1

1984534ae2754b37dae928a4bc23dc7bdd0d119a
SHA256

663f60c9501ea755c85297d403edd7b1262e89c85ffcd6ad36bd3481476c6563
SHA512

76e23c20aee19167dd60198818bd34eecbf0a1674a88ef1103cfce81b4bdbce6aad97001b179cd0968143e98d4a3417fb356ad3e87007f6854375e9bbaf7e557
SSDEEP

3072:Gkpe7hPXEomWqLEnCYvcvIXRTy1hmUI0xlOcwVIvS3oGcFuG9hFoHk148GzMwnp6:9oXpvDx8hzNxl8VIvSiFxTO8GzMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000ef5fe73b9823f2b19f2cd2a6b2e52

Files

000ef5fe73b9823f2b19f2cd2a6b2e52
.exe windows:4 windows x86 arch:x86

1c401b959f744f1e1cb48e5faacfced2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ