ef6d1b79fd84e726811f0ed00824e8b9[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef6d1b79fd84e726811f0ed00824e8b9.exe
Size

484KB
MD5

ef6d1b79fd84e726811f0ed00824e8b9
SHA1

6451a5c548d0adfef7892668f3c4f5e28b48fe9b
SHA256

49949d277cbdbb1ab6ca8bad7627d4b02f9d26ec3a18ae5e11180470c4f0472a
SHA512

97898bda737db8fa36b27bfa0e009ff9d3b89795d697b1acb5b495c7e2c7064fdc763ea337ed3a656d66a4929d16319e7a873387f601d3b8fa3d5ec19e142045
SSDEEP

12288:l26IWVBS/GxwImDPCVrPAk9KMkbVetCXzQp0:lgWDS/ebd9KMMetCK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef6d1b79fd84e726811f0ed00824e8b9.exe

Files

ef6d1b79fd84e726811f0ed00824e8b9.exe
.exe windows:4 windows x86 arch:x86

5742cec8529695bd50b7e5c71109cb26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextA
RedrawWindow
GetCapture

kernel32

FindFirstFileExA
GetUserDefaultLangID
GetSystemDefaultUILanguage

advapi32

CryptExportKey

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE