2d92a6ed5dd6851f636fda4d37612f06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d92a6ed5dd6851f636fda4d37612f06
Size

85KB
MD5

2d92a6ed5dd6851f636fda4d37612f06
SHA1

ef3303a541a827807bfe80ff34b8298723f1b330
SHA256

98de0b49a16943e73288b9b28d0df3fc4268be809292e14be580147c200c3288
SHA512

58a72d307aa7a15bc4b1fb895323d09b5b3199a600e3dfcde4c3443faceadcd4ce6fc0c5f1681d7e094d896340d6554cf8bcec78014f56519080b8bc54b87534
SSDEEP

1536:keJGdq4AYnCRHQIqgWYPWnWiny1uC9MkXXGM17K6gc5xkSKZPR/JuKXmYJQ7ONJ2:Byq4AdRigW3nby119MWKfcrktZPFJuqc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d92a6ed5dd6851f636fda4d37612f06

Files

2d92a6ed5dd6851f636fda4d37612f06
.dll windows:4 windows x86 arch:x86

f8d3acb36b2a8a5724755ecd973307ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC
EqualRect
DispatchMessageA
ChangeMenuA

kernel32

SetLastError
lstrcmpA
Sleep
SetEndOfFile
RtlUnwind
EnumResourceLanguagesW
GetFileSize
GetLastError
GetStartupInfoA
OpenFile
OpenFileMappingA
ReadFile

oleaut32

SysStringLen
VarBstrCmp
SysReAllocString
SysFreeString
ClearCustData
OleIconToCursor
RevokeActiveObject
SafeArrayAccessData
SafeArrayCreate
SetErrorInfo

Sections

.text
Size: 18KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ