63254e961f0a673a8d5da600b63c62b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63254e961f0a673a8d5da600b63c62b6
Size

86KB
MD5

63254e961f0a673a8d5da600b63c62b6
SHA1

e7fe393e428fd3ea8a5df4275a40d63492883eb7
SHA256

86364275ed003a7727f76362fc20c48285274f7e7e862f4f159198f7991eacaf
SHA512

dd35685a2af92b8e48a46deba894c86c03985c1a2afbd67d94f15c860327564503ea310fc0ba6635d537f082bbdf905c8f9b73b9c665ea002cd612b3fa9a05ad
SSDEEP

1536:kiFFS35509zjCzzHQHcI7gVORM6m77N4xsBHkQ7szx64j7NW:HC5G63wHccMUm7GGHkXzx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63254e961f0a673a8d5da600b63c62b6

Files

63254e961f0a673a8d5da600b63c62b6
.dll windows:5 windows x86 arch:x86

dcf25a0d3c66d4713ef8488dd38a2db8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
malloc
free
memcpy
srand
rand

kernel32

CreateMutexA
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle

user32

SetScrollRange
SendMessageA
GetWindowRect
SetTimer
InvalidateRect
GetScrollRange
MoveWindow
PostMessageA
SetWindowPos
CreateWindowExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ