ef79a8e0f7b8241a48db7cfe7ad2b73454176b8f2f40625b325db62512daa90b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef79a8e0f7b8241a48db7cfe7ad2b73454176b8f2f40625b325db62512daa90b
Size

62KB
MD5

2f773018c1795518b24c021f7bd3a275
SHA1

c545e0018d70a1d14c581f81eea8f706cec8395e
SHA256

ef79a8e0f7b8241a48db7cfe7ad2b73454176b8f2f40625b325db62512daa90b
SHA512

c7699c997c39b2f3c44ff63e382152a489e95d8b3a7ca3369b685cbf149866a66ca4e798c8b5f00f81feb8bd926a5b5500995aef4aff2407ba36c3e4e6c40d4f
SSDEEP

1536:SO9+848b4XAMadJW7lmNlHO9yRbprXIUtSB1S:X9D4zYWQHHCKBX381S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef79a8e0f7b8241a48db7cfe7ad2b73454176b8f2f40625b325db62512daa90b

Files

ef79a8e0f7b8241a48db7cfe7ad2b73454176b8f2f40625b325db62512daa90b
.exe windows:4 windows x86 arch:x86

2a6b744c26afe8024c5c77d7486329c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
GetProcessId
BeginUpdateResourceA
GetConsoleFontInfo
GetSystemTimeAsFileTime
SetVolumeMountPointW
GetCommTimeouts
LoadStringBaseW
BaseIsAppcompatInfrastructureDisabled
WriteFileGather

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE