ef999897dfbaffedced6c56119baec2032d6baded1666667354d8027e44c5011N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef999897dfbaffedced6c56119baec2032d6baded1666667354d8027e44c5011N
Size

215KB
MD5

2b546a372f81a1b9c227e45e5b5fdd20
SHA1

36e8367b5ed37407d5575137d212c57991b59b01
SHA256

ef999897dfbaffedced6c56119baec2032d6baded1666667354d8027e44c5011
SHA512

27d1511624590f78814b098c102dde37a4d2069b846606881969b4c046d89a7a4d245c45a52efd2bfb3a0288d1845508ce05b3114bf549f8e8381ddee46cfd80
SSDEEP

3072:i2zyp8caP5sqvUd0EuoBtLM4GzsX12vQTDdfON9YJbF0c1ZG7CO1zO6KIgaIm91:bzIpo1Ud0EuktLwiDdEcBU7ZC6VgaIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef999897dfbaffedced6c56119baec2032d6baded1666667354d8027e44c5011N

Files

ef999897dfbaffedced6c56119baec2032d6baded1666667354d8027e44c5011N
.exe windows:4 windows x86 arch:x86

1c564a9ed792abd56fb4031f59990fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconW

user32

LoadBitmapA
GetTopWindow
LoadCursorA
LoadIconA
GetDC
CreatePopupMenu

kernel32

GetProcessHeap
IsBadReadPtr
GetModuleHandleW
VirtualAllocEx
GlobalAlloc
lstrlenW
GetOEMCP
GetACP
ExitProcess
IsBadHugeReadPtr

gdi32

GetDIBits
GetDCOrgEx
GetBkColor

Exports

Exports

WnVy5

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ