0ef4fc1d78c9f124905102f62f4ee9ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ef4fc1d78c9f124905102f62f4ee9ca
Size

7.4MB
MD5

0ef4fc1d78c9f124905102f62f4ee9ca
SHA1

ef165c64b85105c9bb5ab3a96d8ea28ec8f2370a
SHA256

e30000f987d5b4f5b9423cfe0ca3888b4c2d9843e61bb9c93a533a1c36baee8e
SHA512

0e3cba0934f2eadbf8ee9ae3759d0d23e51eea17cce1d2a9c805fee362e77e720fa61c3ce67c5fb4adb45bfdf4b6233d55d0e9bd02f1ab5fcf1c0cb48092b34b
SSDEEP

196608:fKrmNaI9vWEPNHAYD36Q9pocdeKczMZS/ENP6z:f7Icrb9p3deKBg/rz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef4fc1d78c9f124905102f62f4ee9ca

Files

0ef4fc1d78c9f124905102f62f4ee9ca
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 4.3MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

czqmsvwf
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pseykkvu
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE