692b64367c00a0b0b08d9019c0d8e490 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692b64367c00a0b0b08d9019c0d8e490
Size

62KB
MD5

692b64367c00a0b0b08d9019c0d8e490
SHA1

2856e1c46f5cd58b097a972176da6194b4be7b23
SHA256

27d74134227adf1c4789a226fcb55374be1f11d3cbc86e466f15df8f3b6cd56c
SHA512

5eecae08cfb195a4a105baaddfe39a70a120b2d566391565e4b4762131c762591d1cb4ce2b5e9dd7365e814309de206147fb63392533c9748d411662aa5dba15
SSDEEP

1536:m+xZzcB147csVTSd//ezlH5WFDZO88VUe32Hq:X247y//eKhZwShq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692b64367c00a0b0b08d9019c0d8e490

Files

692b64367c00a0b0b08d9019c0d8e490
.dll windows:4 windows x86 arch:x86

f1dc948a256cf1da9cdb42389386d691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetOEMCP
InterlockedIncrement
GetUserDefaultLCID
GetConsoleCP
FatalAppExitW
ExitProcess
lstrcatW
SetEnvironmentVariableW
IsDebuggerPresent
DebugBreak
IsBadReadPtr

advapi32

RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ