0277dd0e9ff8bc8f047f71f505145b58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0277dd0e9ff8bc8f047f71f505145b58
Size

10KB
MD5

0277dd0e9ff8bc8f047f71f505145b58
SHA1

06cc39a535a1d28a743d15472d6cdd696c25427f
SHA256

cffcbb701d8d0b4fae38f6be035684724fbccdf0fc2ac6a37b5db60d4a696f5f
SHA512

286bd57d30f1ea28095037f7abad1205eaf4efc11b0a3856899b2186a260e01e9f2a1cfce28dd4083e8c000486eed5d1c6e5b88b6ff7529a9767ded982fd5080
SSDEEP

96:HWzI5vVYN6xFsN2F28ePLWddrvzGYpGiLFVzAu8ZMnhfE0pHK8T03tiG9yafZuhB:2QvO6xFs0FFGWGEzAZspHK3njKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0277dd0e9ff8bc8f047f71f505145b58

Files

0277dd0e9ff8bc8f047f71f505145b58
.dll windows:4 windows x86 arch:x86

3a6cbbabf090f6537377da53cc8714ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
Sleep
GetCommandLineA
GlobalFree
GetModuleHandleA
GetCurrentProcess
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
GetProcAddress
IsBadReadPtr
VirtualProtectEx
CreateThread
ReadProcessMemory

user32

SetWindowsHookExA
GetKeyboardState
ToUnicode
CallNextHookEx

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

strcmp
_adjust_fdiv
malloc
_initterm
free
memset
strstr
memcpy
strrchr
strcpy
strlen
_stricmp
strcat
sprintf
??2@YAPAXI@Z
strncpy

Exports

Exports

fa
fc

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ