608e988afb81e189c039752a696ad648 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

608e988afb81e189c039752a696ad648
Size

59KB
MD5

608e988afb81e189c039752a696ad648
SHA1

c9e7fdfd1afea5b4b07c70985ceac5ccad12b2bd
SHA256

c64cc840b1923e15a1454e768e82239ae4d71513ed62097eef8c7ff860b1b628
SHA512

8c3f400895a4d947e18546028fe54838cb07ed542fc330a9d1abeb1db8654320ba6bdf3f4a1aa8832c0d6d42b21f68923df8f0e60107d0341e6d733cf038043b
SSDEEP

1536:WxwPLbO2cYThlfjDCadERteX9YzW2tn8lj+tL:uwPLS23Thl6rM90W2WJ+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608e988afb81e189c039752a696ad648

Files

608e988afb81e189c039752a696ad648
.dll windows:4 windows x86 arch:x86

0b629dd8c996a09bf28f1d7be7dff29d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
SetFocus
GetWindowTextA
EnableScrollBar
EnableMenuItem
DrawStateA
CopyRect
CopyImage
CloseWindow

kernel32

InterlockedExchange
LoadLibraryW
IsValidCodePage
InterlockedIncrement
GetStdHandle
GetLocaleInfoW
ExitProcess
TerminateProcess
SetStdHandle
CloseHandle
SetFilePointer

advapi32

RegOpenKeyExA
RegEnumValueA
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ