39a2581075d2cfc0fd30537927594e43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a2581075d2cfc0fd30537927594e43
Size

8KB
MD5

39a2581075d2cfc0fd30537927594e43
SHA1

ec4a8a0af4334c740deadc6c1cebcade4c8ee795
SHA256

d461efdd4da11708eccdcfe9b2a495758c2245fd989c4b1239a13cfb948e5e43
SHA512

59cb1e1f440dc61da66ebf957877fa515fa6d785c26e8711ddaf4cb4e661578d18bcc0b92811df3e511ba16bef53d49e064e31c7a74448467a213de339a0eb06
SSDEEP

96:N9bZhO1vDlnqAPp6F7ZprmgiY3UGB4IDLGKoRtGNQLwZkHfYQa4F4UFEcbGZ9cCq:3bbS5nq2pG7Q7a3D+ejZmYQaG4UEA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a2581075d2cfc0fd30537927594e43

Files

39a2581075d2cfc0fd30537927594e43
.dll windows:4 windows x86 arch:x86

2580486e0dab974b37798b4da0a66286

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleScreenBufferInfo
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetConsoleTitleA
GetLastError
ReadConsoleOutputCharacterA
CloseHandle
GetStdHandle
GetVersion
GlobalAlloc
GlobalFree

user32

GetFocus
GetParent
GetWindowTextA
ToAscii
CallNextHookEx

msvcrt40

fclose
fopen
sprintf
strerror
_errno
_initterm
fflush
__p__pctype
_isctype
__p___mb_cur_max
fputc
fprintf
free
malloc
_adjust_fdiv

Exports

Exports

_ConsoleHookProc@12
_KeyHookProc@12

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ