Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    WinterAPI.dll

  • Size

    79KB

  • MD5

    819fec340fb2214d6934b17f3fea8c3e

  • SHA1

    52142a3ae12b1c047480f34ca9f23765228d24b4

  • SHA256

    83566452ed9798a60eb8bea8dec32079d1fd4661084c3f50c7d792e4e0a99a63

  • SHA512

    76c8c80b547817adb61a5a202d46a3701232e68d72559b63c052646fd8bfa2194f3e62f2ce6ce14d1c6e6d2d7d1be8adce90e000c0c125211a6fbb02af8ce9ea

  • SSDEEP

    1536:aD8NOrnH5jax/JByS9gJrv3T5uMb6lt7/OwkJ6zzrjhTa:fN48ByS9krvD5uMb6lVOZYzrjhm

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WinterAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections