0b540b81c7d1db8ed2acdb2703d6f469 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b540b81c7d1db8ed2acdb2703d6f469
Size

85KB
MD5

0b540b81c7d1db8ed2acdb2703d6f469
SHA1

a028008fb6fba2792ffc8e6c6faede36040d6578
SHA256

4f7fd974c73015c7defc9d3587daefb8ed1fa63d9099bb1b7a95f2ca7befb64c
SHA512

13440f76797bc63be1f1491214d09ddda7897dc1e8b5b269c99363c981849bec4f54920eb402b6aae9283c48478901d137c495e0960c721bf7ebce2141b9b815
SSDEEP

1536:FsuuUkCCNbtxKIOvEKCAq+ohqaGHl+SOiQVysKo5mOp4ETqFeDQu2nr9f:qujXCNaZqLhtg+1Rnl4Fair9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b540b81c7d1db8ed2acdb2703d6f469

Files

0b540b81c7d1db8ed2acdb2703d6f469
.dll windows:4 windows x86 arch:x86

3541ca09eb51301901e82a6cf08e7a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawMenuBar
DrawIcon
DrawCaption
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCaret
DeleteMenu
DefDlgProcA
CreateMDIWindowA
CreateDialogParamA
CreateCursor
CopyRect
CopyImage
CloseWindow
CharToOemA
CharPrevA
CharNextA

kernel32

EnumResourceLanguagesW
lstrlenA
lstrcmpiA
lstrcatA
WriteFile
UnmapViewOfFile
TlsSetValue
TlsFree
SetLastError
SetCurrentDirectoryA
RtlUnwind
MapViewOfFile
LoadLibraryA
GetVersion
GetSystemTime
GetStartupInfoA
GetLocalTime
GetLastError
GetFileSize
ExitProcess
CloseHandle

Sections

.text
Size: 18KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ