7395d68dc9aaf0e112817242c5636506 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7395d68dc9aaf0e112817242c5636506
Size

652KB
MD5

7395d68dc9aaf0e112817242c5636506
SHA1

e40c3314d8e41bdbefb48dfd67dd04be7a0f481f
SHA256

bdbfa55d21d71d49ba8e3374c4fcfacadef6eecaba2caf718029a142f9c1e19e
SHA512

a6aaaea06f8cf2f5184edc90dd3e696450054031281e52847faa4ce5dd9f4612b0e5bba50285ea7245067e5c6d70aa9986f1741a43cc9ef07678eda4972ca5ae
SSDEEP

6144:+2GYW/v7s5QKdya5Nn2KWAVRqNIJs+BbZm3jhfwaOl:+dh/v7s2auKWDNIJ7afwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7395d68dc9aaf0e112817242c5636506

Files

7395d68dc9aaf0e112817242c5636506
.dll windows:4 windows x86 arch:x86

49f606383f5c4ac417b22847c095d810

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsAlloc
VirtualFree
lstrcpynA
lstrlenA
LocalAlloc

user32

LoadMenuA
MessageBeep
IsCharLowerA
GetDlgItem
DialogBoxParamA
CreateAcceleratorTableA
CharToOemA
GetMessageA

advapi32

RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA
RegCloseKey

Exports

Exports

cbckwwqwn
jdwycybbyr
yc

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE