2143742e2073ba0aa0f0583b60b1bc23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2143742e2073ba0aa0f0583b60b1bc23
Size

26KB
MD5

2143742e2073ba0aa0f0583b60b1bc23
SHA1

3be958b74f5ba9931ff83582f17f65ebc53055b0
SHA256

73dfd3683b0290331f6be1b44684a2503c2721601f2dbe76caf63d3c23279dbf
SHA512

269fa731ba50399123f1fa8f7a9ac0b2681e896a96a5cc03f785eaae3fd19568f9b5bea218674ce207cec33629c318036dc1842202fab6b9b12adb2a1ce07907
SSDEEP

384:EZ65xeU729kBgthOfcAUwrznYr6tfWTKEQoQcmLBX+7kYm285:EZYwUahrwrznU6glQoNuO7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2143742e2073ba0aa0f0583b60b1bc23

Files

2143742e2073ba0aa0f0583b60b1bc23
.dll windows:4 windows x86 arch:x86

4b4b82174208ec8b4a10b08164f2a4d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
CloseHandle

msvcrt

__getmainargs
exit
__CxxFrameHandler
memmove
_acmdln
toupper
_exit
wcstoul
wcschr

gdi32

GetObjectA
GetDeviceCaps
CreateFontIndirectA
CreateSolidBrush
GetTextExtentPoint32A
GetStockObject
SelectObject
CreateCompatibleDC
ExtTextOutA
PatBlt
GetTextMetricsA
DeleteObject

user32

GetWindowRect
TranslateMessage
SetWindowTextA
GetClientRect
CreateWindowExA
BeginPaint
DispatchMessageA

Sections

.text
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ