624184bcaf37da5e46fc8b5f42407e7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

624184bcaf37da5e46fc8b5f42407e7a
Size

7KB
MD5

624184bcaf37da5e46fc8b5f42407e7a
SHA1

4fb6e39fe9d2243f7ef6aa76644bf3a6be9efd0e
SHA256

94e36b03a9b88a2090e81ce8b2c936ea1f462b551b81fdf29be5d21eb2b3e9a2
SHA512

e268a7571544fe9b733a8e705a986be5ed7bc498cde2b189ce0eafeda104c54fb3d92fee03b97057396496caaa4a2166c5a2211369863fd81cbcd5c0d522743f
SSDEEP

96:AEu9i+lztlgIw+KuajTLZVJIdV0Ah15mA3YQ5+kgtO2jphKFjx:AEii+ltbKuWzJIdV06CKKFphKFjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624184bcaf37da5e46fc8b5f42407e7a

Files

624184bcaf37da5e46fc8b5f42407e7a
.dll windows:4 windows x86 arch:x86

e8746cfbf195bfafb3a7ae2ad7e95208

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
GetFileAttributesA
SetFilePointer
HeapAlloc
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
GetLastError
lstrcpynA

user32

wsprintfA
CharLowerBuffA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA

wininet

FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCrackUrlA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ