65c9bb737447ab78877e3d324f161b0a | Triage

Sharing

General

Target

65c9bb737447ab78877e3d324f161b0a
Size

230KB
MD5

65c9bb737447ab78877e3d324f161b0a
SHA1

e9e41a5cff2627b5c93f0d300ec5687835f9acc4
SHA256

533d6469388d0824189f8cd2bb07455d8e0d8a82c474a462ec4c5c686b268c32
SHA512

9761cf4328d3cfc4d752b0454f02f048a08a07059736b794577ca925fc3690c71b6f0d0a8ae994b70c8f1e053c677ef5ea3a55589c3b98ed9bab6a2e6880380e
SSDEEP

6144:dvlHwZ2AqPObM2pzUdhUREcuV8lQVr41ymTUmOU:RlQUPPUpoPZ8DTUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c9bb737447ab78877e3d324f161b0a

Files

65c9bb737447ab78877e3d324f161b0a
.dll windows:4 windows x86 arch:x86

82d8e844213157c66fcc45569db91a71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
ExitProcess
LocalAlloc
OpenFileMappingA
lstrcmpiA
CloseHandle
GetSystemTimeAsFileTime

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 548KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ