0d4859ffc6536a258a0bd38a7468d3d4 | Triage

Sharing

General

Target

0d4859ffc6536a258a0bd38a7468d3d4
Size

66KB
MD5

0d4859ffc6536a258a0bd38a7468d3d4
SHA1

f500707e2caf45d55b16c80005b7fc308b3adaeb
SHA256

7fba2672f614c11d89b7660a877b966dc1d9919b6f270b546fa7143a51463b07
SHA512

ad43e52b01932d2f41c29297f6b52435096c4e01a76cae415294fecebb89ad4b4915e7de775b97a204cf522e599fdd2803a84e7bc1aa28162b8aa198ddc8cb00
SSDEEP

1536:xvb3+yiMDlbdbBfsbN7Fc+hf4lUOKr77j:VPielBfsbQmQUnrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4859ffc6536a258a0bd38a7468d3d4

Files

0d4859ffc6536a258a0bd38a7468d3d4
.dll windows:4 windows x86 arch:x86

5bf8b06ec5c49ae244c7585e39a74eff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetFileAttributesA
GetFileTime
GetModuleFileNameA
GetSystemTimeAsFileTime
GetVersionExA
GetVolumeInformationA
GlobalFindAtomA
HeapAlloc
HeapCreate
HeapDestroy
HeapSize
InterlockedIncrement
LockResource
OpenEventA
SetErrorMode
SetFileAttributesA
SetUnhandledExceptionFilter
lstrcpynA

user32

CallNextHookEx
CopyAcceleratorTableA
EqualRect
GetClassInfoA
GetClassInfoExA
GetDesktopWindow
GetMenuItemID
GetSystemMetrics
IntersectRect
InvalidateRgn
MessageBoxA
SetDlgItemTextA
ShowWindow

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ