2d24a613cc82faee36b15e297202d1a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d24a613cc82faee36b15e297202d1a9
Size

182KB
MD5

2d24a613cc82faee36b15e297202d1a9
SHA1

d87e8d645bacab811283a9f6cc9cb7b97670ff43
SHA256

1edbb2a67212937e48e9f4252c4c0dcf5b37668851526995eed723865d4633a4
SHA512

084e38f0b1fa8d6058ea67827a4e5bd98cfc97cb529a5d97c73455d1eb4109c5711104a2597c2800eae6382b8dec177e923a381e578c5396083273ecdd570e53
SSDEEP

3072:2MdYp9pguP72ISW5E0mvdO0yTfwCq/Xpi3GJxi3s5Fsb:vEeTW5sFO0c8gqxi3s5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d24a613cc82faee36b15e297202d1a9

Files

2d24a613cc82faee36b15e297202d1a9
.dll windows:5 windows x86 arch:x86

44d6c604b5f623ad6238f0901e368d89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
IsWindow
IsMenu
AppendMenuA

advapi32

RegQueryInfoKeyW
RegEnumValueA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyW

Sections

.4a27
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1gfg
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hff7c
Size: 122KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.c493g
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aff6
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ