General

  • Target

    FirewallAPI.dll

  • Size

    503KB

  • MD5

    fca25104e526b1783f0366ff3b4e4445

  • SHA1

    c6931a7349bddfb4996cfaff571dacbdc67f2783

  • SHA256

    1156027076b432f8be84d56a2739dc4957837f10e8756b2d37be5ef870430be4

  • SHA512

    0f8bcb12bc277cbc88b5a1a3eaca437be1429a9280b95e77c616655010d7caae00f44b5cd17e14ed9f81cf9112470c570f9e217e4d13f7feeba9ab32cf9d818e

  • SSDEEP

    12288:2XMjrmEN+x/tC2rTOI4ReYNQAZh3kGo5n9/9EkEJ9c:2XI1+xlvTOI4UYNlh3kGo5nV9EkEJy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FirewallAPI.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    5fec608235b9f1ad74b252d183c724b1


    Headers

    Imports

    Exports

    Sections