63922c2487337188b76e721d86ba1a4f | Triage

Sharing

General

Target

63922c2487337188b76e721d86ba1a4f
Size

175KB
MD5

63922c2487337188b76e721d86ba1a4f
SHA1

506aca93e90417e91bdf5cde5095aa07de62acae
SHA256

1718966d91a317e8d16a0015e8f24c295f8ce978af37acef7cdbc9d76934c100
SHA512

ccc538139a832b42f0eae3c368316080b6247493dbdff0b8d79660ed64520a312f3d01e2527cc71f8437816573a367f6fd5e0cbf16778dfa22b1d834b6759595
SSDEEP

3072:syY5bY8XE+kkqh84cKcv4FinaLzL2rVQLOmpvNbTAvDstOr18T:PRAkkk84e4wne2nmhFAvD4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63922c2487337188b76e721d86ba1a4f

Files

63922c2487337188b76e721d86ba1a4f
.dll windows:5 windows x86 arch:x86

038ee71bd4ea63acaf586d3475ef17a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset

advapi32

RegOverridePredefKey

user32

TranslateMessage

kernel32

OutputDebugStringA
GetModuleFileNameA
CloseHandle

oleaut32

VarI2FromCy

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ