044bc5dd5266aaf58c7590b47a5e3a71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044bc5dd5266aaf58c7590b47a5e3a71
Size

252KB
MD5

044bc5dd5266aaf58c7590b47a5e3a71
SHA1

44a8fbdc5e9d57908499c48b9544e954852b7a38
SHA256

cb650d0deb608b4481f5a49672de739d21b5d2ecb62569cda28a4d726c773af6
SHA512

6e3ac347aea1e7487a12e72794d2261abed234f55c0e11050b086f18fbd104eb45691515c558064e0aed317ce6df8892ea9c295ed4f169f3a8353ee8670c1786
SSDEEP

6144:/cuDEFwUWRDezeJgRvxUceihnGSGVxHd7uGQ:kuDEFwUWRet6onGZzHRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044bc5dd5266aaf58c7590b47a5e3a71

Files

044bc5dd5266aaf58c7590b47a5e3a71
.dll windows:4 windows x86 arch:x86

69bc3cfe7cca88bb521c0a3a5dc537fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

msvcrt

memcmp
clock
exp
mbstowcs
wcscspn
fabs
acos
tolower

kernel32

VirtualAllocEx
GetCommandLineW
GetCommandLineA
ExitThread
IsBadReadPtr
lstrlenW
LoadLibraryExA
ExitProcess
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
IsBadHugeReadPtr

Sections

CODE
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ