553908fa51a9e73b8cc8b6dfaf310603 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

553908fa51a9e73b8cc8b6dfaf310603
Size

169KB
MD5

553908fa51a9e73b8cc8b6dfaf310603
SHA1

03b21c3f47aa53ba1422a7e7710ce7a841ff1c37
SHA256

e8ebcf93a9e9b24cbedc9f009ad80a85bb21d004d4672d08486928bb35947375
SHA512

c5bb9af0677b2c42d45b535d98572954ca74737fe4d4023e2d0f4322aa2311d174607da0abb390fdf73cbafab28a13a89540be9850316ead26766d2cac3cf699
SSDEEP

3072:KpoEzBPEb+k3OycKHCx8qAIi7p61jY2aV1DFGAJ7W8VeUhb:HEzBsb+sBCvAIC81Hy8AgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
553908fa51a9e73b8cc8b6dfaf310603

Files

553908fa51a9e73b8cc8b6dfaf310603
.dll windows:4 windows x86 arch:x86

5acafc82443bd14950cbf31e3d66a4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAllocEx
LoadLibraryA
GetProcessHeap
LoadLibraryExA
RaiseException
VirtualAlloc
ExitProcess

gdi32

GetBkColor
SaveDC
CreatePenIndirect
GetBkMode

user32

TranslateMessage
UnhookWindowsHookEx
IsMenu
UnregisterClassA
GetMenu
CharLowerA
WaitMessage

comdlg32

FindTextA
GetSaveFileNameA
ChooseColorA

Exports

Exports

_jhY6e2
WoyxpMfWUsqjL
_Amy5Cmu7CZfR1K@4
_NwuBK9wgmte@8
9wrFWUKDg
_qO_Y4dfzz6Ccj2
_WIj8jLm_wlxovJ@20
_2IemZGq8wuQ@20
_CzAvM8IdKUHkxA@12
A_kLE1tCY4yN6
_htVnEXZpyZwsp
Jdq7pX3bUJ
hzy1jEP@24
6AuFipDYIKA@12
_Bwn2BjGDGR
_KE3GQXlLGa
GiWy0hxbO
_N4qDKOg

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ