ef51e4909f91aa98222a5bf06f9094b8b57bfe13b680b0993b6bff84f9fccdf2 | Triage

Sharing

General

Target

ef51e4909f91aa98222a5bf06f9094b8b57bfe13b680b0993b6bff84f9fccdf2
Size

120KB
MD5

9dbe339110471fc693d9d0384eb2d885
SHA1

6dbae8edfa16b87114033376bb4a20e3935aeb46
SHA256

ef51e4909f91aa98222a5bf06f9094b8b57bfe13b680b0993b6bff84f9fccdf2
SHA512

f3469f815b47c897f8b8e8c2bc63a4e58fab38df9517f3b48c120637582d342cde1d10f30e6f836cd723f4a96d684e19da942b14abf59abbfe1ccbcd24b7ac67
SSDEEP

3072:C3vkeOwHayJaawrdD7XdLyUgYfbpO4dus9nYiEkukXgJ7D:ykJ/yEaa5teOMa9nYhI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ef51e4909f91aa98222a5bf06f9094b8b57bfe13b680b0993b6bff84f9fccdf2

Files

ef51e4909f91aa98222a5bf06f9094b8b57bfe13b680b0993b6bff84f9fccdf2
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ