5ea2d0d468db072486978e9b034b9369 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ea2d0d468db072486978e9b034b9369
Size

146KB
MD5

5ea2d0d468db072486978e9b034b9369
SHA1

a1e49d491174f89cdd47d74a7bb05071bee32e03
SHA256

bdbd155a84434ef5367187b634fbf541447b1605fbf32e15272844ec307cbd49
SHA512

8f0bbf91ad29742871c557dcf222da733aa2f35a797ad808d7ed7e673db9053849a05e6993f9193eb19e0d799df24d5e50090aa285ea1a85cd86e77f18349c39
SSDEEP

3072:35s22+7CD48e/3HRrpt+jv52d5sYlTMCkbGNg/wEBBlITpTgXvAQ:35o+2Du/3HPNdbloL1wEB8i4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea2d0d468db072486978e9b034b9369

Files

5ea2d0d468db072486978e9b034b9369
.dll windows:4 windows x86 arch:x86

84aee533e9285d5ba72b36752198b5d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
PulseEvent
RtlUnwind
SetLastError
SetPriorityClass
SetThreadAffinityMask
SetUnhandledExceptionFilter
lstrcmpA
lstrlenA

msvcrt

__getmainargs
__p__commode
__set_app_type
_except_handler3
exit
free
realloc

user32

AppendMenuA
DestroyWindow
EndDeferWindowPos
GetDC
ScreenToClient
SetMenuItemInfoA
SetWindowPlacement
SetWindowPos

winmm

mmioAdvance
mmioClose
mmioDescend
mmioStringToFOURCCA
timeBeginPeriod
mixerGetLineControlsA

Exports

Exports

W32N_GetAdapterRegistryInfoBySubkey

Sections

.text
Size: 94KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ