704708491038f0446cbd5cb83d87dbe6 | Triage

Sharing

General

Target

704708491038f0446cbd5cb83d87dbe6
Size

66KB
MD5

704708491038f0446cbd5cb83d87dbe6
SHA1

26bfa044c030051c3662ca70faf1c171c6169e5a
SHA256

86f8f8b0208391fff437a676a2785a304eb2dcb4d4e792caceb38188c9f23480
SHA512

f6bd6fb8ea22c2545d4d9075f1ac148f9b0fbd891d02eb3f6012ab82b6d998093fa2eb8659fce96197067be763011cc52e6875dc50bac0a94e9bd9df761e9386
SSDEEP

1536:iv0VDKj+49DZovcvffMdaUE1ViNmQ+Uw95qGj7SVO4tP:S0VN4hZPnMA7EllwD1qO4tP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
704708491038f0446cbd5cb83d87dbe6

Files

704708491038f0446cbd5cb83d87dbe6
.dll windows:4 windows x86 arch:x86

b15619af6e9316a66cda08e597d9b4ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
CompareStringW
FreeEnvironmentStringsA
GetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalDeleteAtom
GlobalFree
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsBadWritePtr
SetFileAttributesA
SetFilePointer
SetLastError
TerminateProcess
UnlockFile
VirtualFree
lstrcpynA

user32

DestroyWindow
GetClassInfoExA
GetClassNameA
GetMenu
GetPropA
GetScrollPos
GetSysColor
GetSysColorBrush
RegisterWindowMessageA
SystemParametersInfoA
TabbedTextOutA
WinHelpA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 905B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ