ef993ff77d461ab87e33ac7137219b12e63b1ba64e58499c71e28633b52934bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef993ff77d461ab87e33ac7137219b12e63b1ba64e58499c71e28633b52934bb
Size

120KB
MD5

56398aee36cc1372fd0c20ce3a382725
SHA1

3bdcb521641777743aa5792ee2df499c36b6de08
SHA256

ef993ff77d461ab87e33ac7137219b12e63b1ba64e58499c71e28633b52934bb
SHA512

3bd6ee4be9eef0b0f9ff3774b6306f113078a634825e1c0972672250017124cf4f6c0a5db5dcff758c293947dceba99975868e4728eba1936d9de07d3255e062
SSDEEP

1536:sEL6iX/0/UBiBnDDe00dh70wQ/Zk8TMmiVq2s/G6NZdZw5iUoYYHFIx80w:sg6M0vnDD061EwG6NPS0lIx80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef993ff77d461ab87e33ac7137219b12e63b1ba64e58499c71e28633b52934bb

Files

ef993ff77d461ab87e33ac7137219b12e63b1ba64e58499c71e28633b52934bb
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ