434fb546531b5ac1dc9ddd1df558e62b | Triage

Sharing

General

Target

434fb546531b5ac1dc9ddd1df558e62b
Size

94KB
MD5

434fb546531b5ac1dc9ddd1df558e62b
SHA1

8493ecc992c6d5931fcf22787c6145a48e411b3d
SHA256

cffe46b12d698c416749ffe517559bcbac3a2edaa20e7d3b495be90762cc356a
SHA512

07f313e1187488ab04844161ee9e6f468a2d6ebe4a2e73917d0108993b4c4b6ac840c8fe080745bcd7a103bb17990ee682617ecdab3382d19c0fdcaf2b57aca0
SSDEEP

1536:TEl5C8RzFtV13Kl+GTnXLv6BVH5Tj0L+2aq7fO2ktpuBDkY+jwJqcIRptsrl8biO:wl5C8RL6+4neV8+2p76nuBDkJgRx8L1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
434fb546531b5ac1dc9ddd1df558e62b

Files

434fb546531b5ac1dc9ddd1df558e62b
.dll windows:4 windows x86 arch:x86

80f25e3656a7ba32f650e8cf07f46a77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetFocus
RegisterClassA
LoadAcceleratorsA
EndPaint
EnableScrollBar
DispatchMessageA
DestroyMenu
CreateDialogParamA
CreateAcceleratorTableA

kernel32

OpenFileMappingA
lstrcmpA
VirtualFree
VirtualAlloc
TlsSetValue
TlsGetValue
TlsFree
lstrlenA
lstrcpyA
CompareStringA
EnumResourceTypesA
FlushFileBuffers
FreeResource
GetCommandLineA
GetFileSize
GetLastError
GetVersionExA
LeaveCriticalSection
LocalAlloc
SleepEx
SetEndOfFile
lstrcmpiA

oleaut32

SafeArrayAllocDescriptor
SafeArrayCreate
SysFreeString
SysReAllocString
VarBstrCmp
SafeArrayAccessData

Sections

.text
Size: 24KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ