69aec19c894aa89ce3c569bfc362a2ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69aec19c894aa89ce3c569bfc362a2ce
Size

11KB
MD5

69aec19c894aa89ce3c569bfc362a2ce
SHA1

c3696facba74de9b47d056de1659ae06b2333695
SHA256

c25ed371554b4563bd3e25626c04f14ee0a4cd8ad4df31fe87f59b843731039e
SHA512

a2f0789d25bfd2ba389d08a3ce61d5f41d5591a0a37df60a1aa762b2c280e095172db6109f2113772fe2bcfb969fc93215efc8e47cfbc85db45116709ea9b30e
SSDEEP

192:HGYdsR3S+5wO9i5XVY806PuaCpamv2Xv5YPDWd4wNNpqzlXLdHc8A6a4W:HqSgji5XVciFcvav5YPDOwlXLdHXa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69aec19c894aa89ce3c569bfc362a2ce

Files

69aec19c894aa89ce3c569bfc362a2ce
.dll windows:5 windows x86 arch:x86

399f8e3e14a866050713e660c9a266fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
OemKeyScan
PostMessageA
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
PostQuitMessage
GetClassNameA

Exports

Exports

_Test@0

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ