206a792418dfea98d85f34eb0334a59c | Triage

Sharing

General

Target

206a792418dfea98d85f34eb0334a59c
Size

53KB
MD5

206a792418dfea98d85f34eb0334a59c
SHA1

0545c59cce60093a8f5abf178c37d55d7a78aa4c
SHA256

a3e02fc5d99e764268f9446c511942281439881d4bbfd80f4e9d5996da59a3da
SHA512

e7618e773f42bb33e0b442900fc4debaf81cdf4a29a890b1f1cf55d2437d8868d9a41138af0369f65d77a750f05d14ec188e9693a63e8627ac9e26b1e4eedd94
SSDEEP

1536:me1x/tOJ2H+DwpQXSNgMAz8AUhc6zcWk6vS:lfIse3MSFUhc6zfLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
206a792418dfea98d85f34eb0334a59c

Files

206a792418dfea98d85f34eb0334a59c
.dll windows:5 windows x86 arch:x86

424ad7e95ce84a6cd26c7fce522046e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetActiveWindow
MessageBoxA
GetForegroundWindow
FrameRect
SendNotifyMessageW
RegisterHotKey
GetDlgItem
RegisterClassExA
DrawFocusRect
GetTopWindow
TranslateAcceleratorA
FindWindowW
HiliteMenuItem
GetScrollRange
AppendMenuW

kernel32

GetModuleHandleExA
VirtualFree
SetFileAttributesW
GetTimeFormatW
SleepEx
lstrcmpiW
GetBinaryTypeW
GetTempPathW

Exports

Exports

?SetSystemInforma

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gff
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uyu
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dff
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kjf
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE