6135b7bbc1be847aee54b6fae9b487fe | Triage

Sharing

General

Target

6135b7bbc1be847aee54b6fae9b487fe
Size

63KB
MD5

6135b7bbc1be847aee54b6fae9b487fe
SHA1

eb2a11c615e04b0a527835600f7607e9cfebd5d7
SHA256

bd958f6dc89bd51556670a9d088c042038ddb4d5382bd0afc0e16a3fce61fbd2
SHA512

7de439b3535b95a4b124c0bf6561bb07597637e65d6e29a71a2c556a7d13ca85b471da0924679433e9cbd2c2e4d21e7e9c2f2f5b6945721f14895a2c5f1f2529
SSDEEP

1536:NfODSoPcdLh57ZDKVjqlVWrRc8rHmPDxTqotMU+:NfjoYX7ZDKkurTUDxTqoGU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6135b7bbc1be847aee54b6fae9b487fe

Files

6135b7bbc1be847aee54b6fae9b487fe
.dll windows:4 windows x86 arch:x86

af5d04a1ab26bb52fc85736b823eb40a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetFocus
OffsetRect
OemToCharW
IsCharLowerA
EnableMenuItem
DrawTextA
DrawMenuBar
CloseWindow

kernel32

GetExitCodeProcess
OutputDebugStringW
IsDebuggerPresent
GetLastError
GetEnvironmentStringsW
GetConsoleMode
FatalAppExitA
WriteConsoleW
ExitProcess
TlsAlloc

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ