694cfd39050fafb121bc7250c8b7ad45 | Triage

Sharing

General

Target

694cfd39050fafb121bc7250c8b7ad45
Size

58KB
MD5

694cfd39050fafb121bc7250c8b7ad45
SHA1

50370e8e1bc2a3262ec3e579e70d1dee3e075a5a
SHA256

7efcdc838780e7369c8a823fdf7d027758deec1e3d6cec4d575beecbfd3f17d2
SHA512

c2f64a1dd44d0bfbcb55d9d7804a7541f0dd3f1f2169a8c915e683f825aafc40a1d8d082eec85d277db943508db561ca531528f859c58a2e7b32db42911ed203
SSDEEP

768:/nRnsiYOLkTdY48/jQuGLXIvVginVTlKLPWuvsiypP52WXRAPIijT6AZ:/nJsivCq48RG8tgoVTlKLBybvXRAJT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694cfd39050fafb121bc7250c8b7ad45

Files

694cfd39050fafb121bc7250c8b7ad45
.dll windows:4 windows x86 arch:x86

7e5ba221903d2cdd23135c5c43f2fdbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
GetModuleHandleA
GetModuleHandleW
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
GetLastError
CreateMutexA
LocalAlloc
OpenMutexA
WaitForSingleObject
ResetEvent
CloseHandle
SetEvent
ReleaseMutex
FindClose
FindFirstFileA
Sleep
GetFileAttributesExA
CreateThread
GetExitCodeThread

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

shell32

ShellExecuteExW
SHDestroyPropSheetExtArray
SHAppBarMessage
Shell_NotifyIconW
FindExecutableA
ShellExecuteA
SHGetFolderPathA
CommandLineToArgvW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ