630bd2d29967baec4ff0cba2f1f17190 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

630bd2d29967baec4ff0cba2f1f17190
Size

67KB
MD5

630bd2d29967baec4ff0cba2f1f17190
SHA1

2defb0ce5db3a0f8438fd63e52ab1a68d8917b07
SHA256

3619857aae11f4d0199b00469dd0f3aa79f42c23d5834d5f0409f865de9ec217
SHA512

9a57d30c192896994581158b8c505882e00a9d3fcc475a32293eedf6d140905dec0cf9a34f1fe4c817373f244d198c4cbb9dc7ffdd1ef8a180ff981f70bbbd36
SSDEEP

1536:6kISyZcdbACWMgI7vlgB3hdlcG/SUcWREwna4V7eLnkffk:6kBAuiBRPv/SGR2ix3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630bd2d29967baec4ff0cba2f1f17190

Files

630bd2d29967baec4ff0cba2f1f17190
.dll windows:4 windows x86 arch:x86

fe81dc07121a9d158bae8bd609ef5c71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
GetACP
GetCurrentProcess
GetFileAttributesA
GetStringTypeA
GetTimeFormatA
GetVersionExA
GlobalFree
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
MultiByteToWideChar
SetLocalTime
UnlockFile
WideCharToMultiByte
lstrcmpiA

user32

DispatchMessageA
DrawTextA
EndDialog
GetCursorPos
GetForegroundWindow
GetMenu
GetMessageTime
GetPropA
InvalidateRect
MessageBoxA
MoveWindow
PostMessageA
PtInRect
RegisterWindowMessageA
SendDlgItemMessageA
SetMenuItemBitmaps
SystemParametersInfoA
UnhookWindowsHookEx

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ