41ed3cf9dee579cb610a04bf86aaa879

General

Target

41ed3cf9dee579cb610a04bf86aaa879
Size

17KB
MD5

41ed3cf9dee579cb610a04bf86aaa879
SHA1

7389464424ce04936a533174c2f166c3b42e4ac5
SHA256

cab0a781ae354854a25095be8e7794c52860e446ebc20957111c409b986b5fc1
SHA512

986099fbab0cb4fae0e819be5fcf565ae0abf47b685349a6399dd2b78c8af987d2b4dcfb4fb94bd511b7eb49b8be8eb78e1a187bc8cc70e794637cd2617cd5bb
SSDEEP

384:9zwpVQg96+YJ6gudXPWM/2A1aTDjbKdKm7K0Z1:94VQg96Lu9PWz5f2bZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ed3cf9dee579cb610a04bf86aaa879

Files

41ed3cf9dee579cb610a04bf86aaa879
.dll .js windows:4 windows x86 arch:x86 polyglot

805e5c633a3276ca3c92a85423afac30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowTextA
GetWindowLongA
SetWindowLongA
SetWindowPos
BringWindowToTop
GetWindowTextA
TranslateMessage
DispatchMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
UpdateWindow
ShowWindow
SetTimer

kernel32

GetTickCount
GetVolumeInformationA
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
ExitProcess
CloseHandle
GetLastError
CreateMutexA
GetCurrentProcessId
AreFileApisANSI
MultiByteToWideChar
GetSystemTimeAsFileTime

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

rpcrt4

UuidCreate

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllInstall

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

805e5c633a3276ca3c92a85423afac30

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

rpcrt4

ole32

oleaut32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 288B

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 480B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 288B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 480B