aff32ba31fda981ba2fcb36cb4155bf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aff32ba31fda981ba2fcb36cb4155bf0
Size

202KB
MD5

aff32ba31fda981ba2fcb36cb4155bf0
SHA1

ab0310b02bae8e84c8c6b9d6732c0261df619978
SHA256

e928998ebefc3d6aee10850de0ea03b99c18f8a4dca9596bebcf4320fb3fea23
SHA512

69f8e732cef953787b6ab05cac91d01eb328a9eb0df32dd59ff602212ceea9cc832df9d81e17953b49756ca4449125a9c2e1d8b16b708679c995df3cdc9117b6
SSDEEP

3072:XGP0CKXFbDu620ASP5+gVg6cxd5+ek14A8YN0Oy47QkRLpgXkpnCvhEEAe:2P0XI6204xGek14Auh47QWpg0k2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff32ba31fda981ba2fcb36cb4155bf0

Files

aff32ba31fda981ba2fcb36cb4155bf0
.dll windows:5 windows x86 arch:x86

e8ee1ea6f975fb8b278733c34074fc4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetSystemInfo
GetModuleHandleA
GetStartupInfoW
GetProcAddress
IsProcessorFeaturePresent
SetFileShortNameW

user32

DialogBoxParamW
LoadImageA
LoadCursorA
DestroyCursor
GetSysColorBrush
DrawTextExW
GetDlgItemTextW

gdi32

SetMetaFileBitsEx
GetSystemPaletteUse
OffsetWindowOrgEx

Exports

Exports

JarCu

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ