6f54489eba36fd6c7333b67a070da96c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f54489eba36fd6c7333b67a070da96c
Size

96KB
MD5

6f54489eba36fd6c7333b67a070da96c
SHA1

116e87e4b67abd3ae16181109c5f0245e12abe5b
SHA256

14acab7760b39b218163a36e1a3f956285ffb1c05ad2b72101aa926113d7539b
SHA512

5cf683b4c449feb3f78e07ffb74ac5d9ba0b12523ead79f54aba92210793d0414396a9b4d206ba8332fda44848cce6544962059b9ba8b77a5e9a60e3bda11a29
SSDEEP

3072:OwdOsvvksdLWXPi1yH5WQL93qQQ6zwcXs:OAtXjIi1yHZ1qQPXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f54489eba36fd6c7333b67a070da96c

Files

6f54489eba36fd6c7333b67a070da96c
.dll windows:4 windows x86 arch:x86

fc1c172efb8713af923300cc697b9319

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DialogBoxParamA
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DefDlgProcA
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateDesktopW
CreateDesktopA
CharToOemBuffA
CharPrevA
CharNextA
CharLowerA

kernel32

FindResourceA
lstrcmpiA
lstrcmpA
lstrcatA
VirtualAlloc
TlsGetValue
TlsAlloc
Sleep
SetLastError
SetCurrentDirectoryA
OpenFile
MapViewOfFile
LocalAlloc
LoadLibraryA
GetSystemTimeAsFileTime
GetSystemTime
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
FlushFileBuffers
FreeResource
GetPrivateProfileStringA

Sections

.text
Size: 23KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ