6aa22f86eebe907fd68ab25ae3f3478e | Triage

Sharing

General

Target

6aa22f86eebe907fd68ab25ae3f3478e
Size

144KB
MD5

6aa22f86eebe907fd68ab25ae3f3478e
SHA1

13a3d6ffecc17ca2f1abe77ff805dcedf824da10
SHA256

55c8c6843b9bb0049b94c15bf62184c3e6bfc0d5c72fe874d3286de3e7d2b943
SHA512

c5c1d59579e3c7dee1d54cba8e1684bef8bdddc5c7b4609627d0aef1975031461bacf996d8227fc30b904c7a2ebeb33933dfc1c9274d02ec39614d800f94ed5e
SSDEEP

3072:YSftpNluLXUzH+Q99mMuD4rrj/ngHYkLF5K:YS3joMH5I2TKYu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aa22f86eebe907fd68ab25ae3f3478e

Files

6aa22f86eebe907fd68ab25ae3f3478e
.dll windows:5 windows x86 arch:x86

90f4fed7a7d077fd30af485887d77992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateIoCompletionPort
CreateFiberEx
GetProcAddress
FreeEnvironmentStringsW
LoadLibraryA

user32

MapVirtualKeyW
DefDlgProcA
AnimateWindow

gdi32

GetMetaRgn
SetGraphicsMode
ExtFloodFill
GetTextCharsetInfo

advapi32

IsWellKnownSid
StartServiceW
GetServiceDisplayNameA

Exports

Exports

kazscfvaymts
xwztjvlrmzuoyhp
zubwdnzeg

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ