680ca8e10d792e9aa91330969e58ec7b | Triage

Sharing

General

Target

680ca8e10d792e9aa91330969e58ec7b
Size

91KB
MD5

680ca8e10d792e9aa91330969e58ec7b
SHA1

54fc12ad4a85189944e91a76d53562cfa72128c8
SHA256

3489ac4da9fcfe081e32ba231630a719a6fd999dcde0701ad1594292a6cf9447
SHA512

5326f0b1652a9d5d8cc631854b37bbea97a730f5e03bf532fc920583e16f1a13c2afd88832ebac59598ccef0048383eac4951266a2d7fc997c5d1ef5430ee37b
SSDEEP

1536:kL9wv8keewTbe6VAbGmW6QO4dW5uNfUBjFV6NUid+tpc99Fywl1tjpse2ZgIWWOh:kLE8kefTsvWkQO9mUrC99gwEe2Zb6O2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
680ca8e10d792e9aa91330969e58ec7b

Files

680ca8e10d792e9aa91330969e58ec7b
.dll windows:4 windows x86 arch:x86

cae77fdb97fdd812ee62fb271c25ffcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EqualRect
DrawCaption

kernel32

LCMapStringW
LoadLibraryA
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsA
GetLocaleInfoA
GetLocaleInfoW
InterlockedExchange

advapi32

RegSetValueExA
RegOpenKeyExA
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 871B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ