ed36da20ad20ffd63b2d4c69bccfd41372faa7c3a3f2171edf863906edf3b480 | Triage

Sharing

General

Target

ed36da20ad20ffd63b2d4c69bccfd41372faa7c3a3f2171edf863906edf3b480
Size

17KB
MD5

9a97e93d0294bb163d20a422ec06eefb
SHA1

421b8fb1287c907311bf4c447e4a3b812105f84b
SHA256

ed36da20ad20ffd63b2d4c69bccfd41372faa7c3a3f2171edf863906edf3b480
SHA512

d4935957f474382cdf7b8f82892bc5fd04e944f046c9786f13d68a0da5a3d168b5617738acfe5e88487843209a75e3bf682d1858baefd996712b256fc5ec3a41
SSDEEP

192:nDqeRwdb3enG2RxnSGzTcb7dYMnW0TYxm2pXEz4JWaULI7kbSHkFQc3psZ/Q99gW:DqzdeGQ/TcFPnW0wp0tekWo5s5eGZvXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed36da20ad20ffd63b2d4c69bccfd41372faa7c3a3f2171edf863906edf3b480

Files

ed36da20ad20ffd63b2d4c69bccfd41372faa7c3a3f2171edf863906edf3b480
.dll windows x86

655be6d4b6825ae7c96140c054e1ac0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExW

user32

GetKeyboardType

Exports

Exports

AssembleApplication
AssembleModule

Sections

.text
Size: 11KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE