07ffae880e0e3a78795c18a5c74fa552 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07ffae880e0e3a78795c18a5c74fa552
Size

67KB
MD5

07ffae880e0e3a78795c18a5c74fa552
SHA1

9a6ee13de6ff7c7cd959a983a572c288c6cea4c7
SHA256

e2ca7a97b7ac5aee613351b435b104d7ba3f9a644ca2041132a737bd5e88aab3
SHA512

9b0a014e77045f2a0772d9997996c34086fd5c6c704741ef3225478d4cb22058748f16f7c8e8e357d9d76f8589e67d7794b18ca134231826a08118ce91c8dd80
SSDEEP

1536:CKaouK0rof8925RMehGW4L6cHMP3wqshuqR+oiz:CKaouK99MqB4LS3MnHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07ffae880e0e3a78795c18a5c74fa552

Files

07ffae880e0e3a78795c18a5c74fa552
.dll windows:5 windows x86 arch:x86

b41ab26011b85071f6a14b54fa6910ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_strlwr
_endthread
_beginthread
_itoa
_stricmp
strrchr
strchr
isspace
memmove
strncmp
fclose
fwrite
fopen
atoi
strstr
atol
memset
_except_handler3
memcpy

kernel32

RaiseException
InterlockedExchange
LocalAlloc
CloseHandle
HeapCreate
FreeLibrary
lstrcmpiA
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapFree
HeapAlloc
GetFileTime
Sleep
lstrcpynA
GetLastError

Exports

Exports

brul

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krvj
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ