7031b2d0eb979281098189d8909e31de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7031b2d0eb979281098189d8909e31de
Size

17KB
MD5

7031b2d0eb979281098189d8909e31de
SHA1

e1f1bea958f4edd251f6cf97d6862d21a19079e0
SHA256

390ff4612b6d142504baf005d44f590d73543ada361bd35e23d1465fc8834f28
SHA512

eef291972cf5951d593014b331f8322c946d921d158d6b6409a64fc4231dbeacd81476a7fe1f1cd7d444d23c0d73692706dd3fdc2da21ad4aca6547f8a0c76ed
SSDEEP

384:c0m3ORlGGia4Uun1RHPGvAJib4iXB8XKuv8Qq13JRmIfpulF852:cORl/tKn15PKJbDTuA3ztulF85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7031b2d0eb979281098189d8909e31de

Files

7031b2d0eb979281098189d8909e31de
.dll windows:1 windows x86 arch:x86

d7f577bfac82b0874297ed3f0542bf63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ