c2990d9491b3d978300e6183980ae81a | Triage

Sharing

General

Target

c2990d9491b3d978300e6183980ae81a
Size

184KB
MD5

c2990d9491b3d978300e6183980ae81a
SHA1

aa8922278e490f9115a5af91e53328f0b8b28691
SHA256

619681a7e0a9c2aa4a3b65194861f99c949fa02762536568bf7ac3777fe650e5
SHA512

45da7c1802f050d829cd9580ce76955c204303d973a8e2fb6a9868a9e19ffe3bb21dddd91c8a5ec571fb340af5068730943c819d9f359fa5620fc694197bb019
SSDEEP

3072:6gkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg2dA4l:zPFkq6zOe5ilSanO5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2990d9491b3d978300e6183980ae81a

Files

c2990d9491b3d978300e6183980ae81a
.dll windows:5 windows x86 arch:x86

4a4882bc1b5b7458d9aba22e8f9b9b31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

gdi32

GetFontData

msvcrt

memset

user32

ShowOwnedPopups

oleaut32

VarBstrFromDec

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ