0495da8a14963f127fb39351cdc58b31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0495da8a14963f127fb39351cdc58b31
Size

70KB
MD5

0495da8a14963f127fb39351cdc58b31
SHA1

a6d16483510f3cb69aee68af041365fbd7756af3
SHA256

ddd8eb15b5500c1284ffbe4460c35fbc4401035ad6af5d1da6186ca1c984ae24
SHA512

8052f9f4eeb780a3f3125a9adb8816c128a9ad75d55e696a44037151c6c0791b9237e099b310f3b5c868910d4b3ceb753d0b7d8fc9ed2b1ace44c75e3fccec92
SSDEEP

1536:dFnYlk3aInseX7vheJ8pLudsJQi+Nah6pjmkPSmWGYGe:7nD+eXMCpLmsS6QrS3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0495da8a14963f127fb39351cdc58b31

Files

0495da8a14963f127fb39351cdc58b31
.dll windows:4 windows x86 arch:x86

9784071ee5e320956833aa365debc1db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
lstrcpyA

advapi32

OpenSCManagerW

ole32

CoFileTimeNow
CoGetMalloc
IsEqualGUID
IsValidIid
IsValidPtrIn

setupapi

SetupScanFileQueueA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleIconToCursor
OleTranslateColor

user32

VkKeyScanExA
RegisterDeviceNotificationW

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ