0013fd03b6c861c1d9747954f5b80bd9 | Triage

Sharing

General

Target

0013fd03b6c861c1d9747954f5b80bd9
Size

42KB
MD5

0013fd03b6c861c1d9747954f5b80bd9
SHA1

31e33a6d32555780ae9f64afeeb9bc06b9c8b847
SHA256

bfbe238b50dcc1710bd38ee0e5e161cd2cf830029abafca30b953b5dd4b56052
SHA512

5b3a66dccf08b6ecb93f6c74b53bdb0f76a24400bc35bcfb8b985a0a6f1dc8fcf13709c78ced9391ff27a04672bdd923c50e1996b337fb2e9813ea832bbad0c2
SSDEEP

768:ETMAmjQ4TM5AFJFFue9VOCOaCry/ticll2jh4Hycq1o9+g:vHzQ/e9V7OZEBll2N4SPob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0013fd03b6c861c1d9747954f5b80bd9

Files

0013fd03b6c861c1d9747954f5b80bd9
.dll windows:4 windows x86 arch:x86

2ec2bab46642aa0c25c3fe741dca8b7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetCurrentThreadId
GetTickCount
LCMapStringW
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
RtlUnwind

user32

MessageBoxA
GetSystemMetrics
SendMessageA
GetUpdateRect
GetProcessWindowStation
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ