34138d1e6604112838e5a87b1c1eb165

Sharing

Copy URL

Twitter E-mail

General

Target

34138d1e6604112838e5a87b1c1eb165
Size

234KB
MD5

34138d1e6604112838e5a87b1c1eb165
SHA1

1f76c631b9e0f02a34ee50c0466776dc6e638844
SHA256

79f8a352576dc8a9ae9fce130b7e5ea19a011ef7336208614b39001e1f5e8ef9
SHA512

c39c3b445606437baa1d77043a7bb48428391b12d87853db3648ba77ddab82ad7765d259d25457b945cfa89425314ea37134f4e13c9296ab417677f506b85030
SSDEEP

3072:6ywt21MbQk96JqzOVNavAZ23G1jpZ6RItijYaZlLwb58OTDsgMk:twtVbQkEJLVNavAj00isaZlLZOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34138d1e6604112838e5a87b1c1eb165

Files

34138d1e6604112838e5a87b1c1eb165
.dll windows:4 windows x86 arch:x86

d0b2f1e89c652442d6d18b7c1f9f786a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
VerInstallFileA

shell32

Shell_NotifyIconA

advapi32

RegEnumValueA

user32

SendMessageW
RegisterWindowMessageA
PostQuitMessage
OemToCharA
RegisterClassA
RedrawWindow
ReleaseCapture
LoadKeyboardLayoutA
ScreenToClient
MessageBeep
OpenClipboard
MapVirtualKeyA
SetActiveWindow
OffsetRect
MapWindowPoints
RegisterClipboardFormatA
PeekMessageA
LoadBitmapA
PostMessageA
RemovePropA
LoadCursorA
MessageBoxA
PeekMessageW
LoadIconA
ScrollWindow
ReleaseDC
SendMessageA
LoadStringA
PtInRect
RemoveMenu

kernel32

LoadLibraryExA
VirtualAllocEx
IsBadHugeReadPtr
GetOEMCP
GetModuleHandleA
LoadLibraryA
lstrlenA
ExitProcess
ExitThread
GetLastError
GetVersionExA
GetCommandLineW
GetProcAddress

gdi32

SetBkColor
SelectObject

Sections

CODE
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0b2f1e89c652442d6d18b7c1f9f786a

Headers

File Characteristics

Imports

version

shell32

advapi32

user32

kernel32

gdi32

Sections

CODE Size: 59KB - Virtual size: 58KB

.rdata Size: 2KB - Virtual size: 122KB

.data Size: 157KB - Virtual size: 157KB

.cdata Size: 1KB - Virtual size: 1KB

DATA Size: 8KB - Virtual size: 7KB

.ddata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 836B

.reloc Size: 1KB - Virtual size: 1KB

CODE
Size: 59KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 122KB

.data
Size: 157KB - Virtual size: 157KB

.cdata
Size: 1KB - Virtual size: 1KB

DATA
Size: 8KB - Virtual size: 7KB

.ddata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 836B

.reloc
Size: 1KB - Virtual size: 1KB