6380f0a1266ce7f8e27497b0e0f73036 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6380f0a1266ce7f8e27497b0e0f73036
Size

130KB
MD5

6380f0a1266ce7f8e27497b0e0f73036
SHA1

b1e73102285b5eafc590b406af92efb26d44696c
SHA256

8186bbffa9e98153aeb9b647be73269bb89846c7abfb9076eca33b615504c879
SHA512

c7c73f0e26e71209890d97b7a4e883bbf5c2e2d9d61ac7f7b5ba5f2be570c1e648fe11e001f5fbf7ec32f361c8deb4a1871ebcb141bde4f017da74df316aa1d5
SSDEEP

3072:X1pGPqBc98Np1w0RaM/bacE/5LccNTHNIb8vRdYh6bXIRKn9jU:SSB39nRn/bQFccNH6wvgsrIRKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6380f0a1266ce7f8e27497b0e0f73036

Files

6380f0a1266ce7f8e27497b0e0f73036
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ