0x00310000000142d0-31505 | Triage

Sharing

General

Target

0x00310000000142d0-31505
Size

4KB
MD5

03e4f4cad051fc67672ad5ab89b75c52
SHA1

6e200b7f95b7e908236fb198eca2cd97f3290936
SHA256

422549144310c7f619fb0a5d0e7ff96352ef962deb9f74bcda7548eccfc22cf7
SHA512

5b442c8fbb114756358f05af9fe22c6f08f88d0918ea2f255c89372e2f1875806cee5dce2a58ffb726287dd509d3dda90fbf80fe32a0a577320057b27c8296fc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x00310000000142d0-31505

Files

0x00310000000142d0-31505
.dll windows:4 windows x86

767a5b32183c6c4ff645882480adc9a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
GetModuleHandleW
CloseHandle
Sleep
CreateThread
GetCurrentThreadId
GlobalFree
lstrcmpW
lstrcpynW
GlobalAlloc

user32

DestroyWindow
SetWindowLongW
GetWindowLongW
SetWindowTextW
SetDlgItemTextW
DispatchMessageW
PeekMessageW
WaitMessage
IsWindow
CreateDialogParamW
ShowWindow
AttachThreadInput
IsWindowVisible
wsprintfW
PostMessageW

Exports

Exports

destroy
getWindow
show

Sections

.text
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ