4939864fa8c552daddd84eecc206c0fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4939864fa8c552daddd84eecc206c0fc
Size

60KB
MD5

4939864fa8c552daddd84eecc206c0fc
SHA1

9befccedaa1f63ed15c0d1289ec9a585c991c0fe
SHA256

39f500674b1a23ee03608949d42e7773d05d5c5294dc3277f51b036da2a93edd
SHA512

d986ae463fb354a6b6a9f9f669130ac7365f4df6c3b2f81388b452e0e6669a2a394d718184a575ee869e43aba2de7a4bc816b22798973b7aaa9ac26288010741
SSDEEP

1536:FmOvw0X3Js6PrDO0Ryy3uPlokqMswxNatoa:F1vwa3JPrD1RR+Ploktsvtoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4939864fa8c552daddd84eecc206c0fc

Files

4939864fa8c552daddd84eecc206c0fc
.dll windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ