68af846639634249426ecc2231d520c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68af846639634249426ecc2231d520c9
Size

61KB
MD5

68af846639634249426ecc2231d520c9
SHA1

13dac21996ce5325c33cf90f4f9c2e060a4e0450
SHA256

89020d8635d6ca84db4e7117ee469da7d6deeee6bccdc7069da3ce0a2f681769
SHA512

82f1d06e7a418e4ade880502b3ea1212feb5680e4f09cf99f9c78ab39c6092da40d5dea8214bba659c53d4daeea0ec26add3dd665214db38102bda141441a8e6
SSDEEP

1536:giAbIoSOKN8wgEbYLsCQP9xbpkJoq5YJDdf9jY:qbvXqCY9lpGqJl9jY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68af846639634249426ecc2231d520c9

Files

68af846639634249426ecc2231d520c9
.dll windows:4 windows x86 arch:x86

3d6165baf809dd6e155995eb08c5ca30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OffsetRect
MessageBoxW
MessageBoxIndirectW
GetMessageW

kernel32

HeapSize
QueryPerformanceCounter
LocalAlloc
HeapDestroy
ExitProcess
FreeEnvironmentStringsW
GetCPInfo
HeapCreate

advapi32

RegOpenKeyExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ