update_eef80614[.]exe | Triage

Sharing

General

Target

update_eef80614.exe
Size

2.8MB
MD5

acf36a2df594ab9c5d62b3f119c474b5
SHA1

0f18ef518e7ed85accaac1bffd347953f0f46596
SHA256

80f7accfb59a72d82e38922cd25caabec2f223dd570789fe70baf7bf28192f64
SHA512

0478ca4fdd64447cf7f66cb20a2537c3959cecc05c0b5d38e043289bead7c1ae560aaa96a1acd07711c4e6f3a26194e66a987ad30e350005064acc989961879a
SSDEEP

24576:Q1DqrUzoecOL6ojp8wyXByS0DE2zj9A0rVfupK58gwJQodPH25dMR1uaCDi+jz0p:Q1xcOzNXyRxmE217WpK5mQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
update_eef80614.exe

Files

update_eef80614.exe
.exe windows:6 windows x64 arch:x64

9c04aee631630caf274675683b603f35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
WriteFile
CloseHandle
GetLastError
GetCurrentDirectoryA
GetCurrentActCtx
OpenThread
GetWindowsDirectoryA
GetTempPathA
ReadFile
LockFile
CreateNamedPipeA
ExitProcess
VirtualAlloc
GetNamedPipeInfo
MultiByteToWideChar
DeviceIoControl
GetSystemTime

opengl32

glNewList

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ