059267e61ff8d2c3071963e34f758848 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

059267e61ff8d2c3071963e34f758848
Size

60KB
MD5

059267e61ff8d2c3071963e34f758848
SHA1

678a78e51055f1cffab525e57312fc4c9e115f62
SHA256

41dcb93d12358cc458f00ee30a742df435e9d6bbd7465e592b21024a31ad413e
SHA512

a8184ed6056e17ba08f26e531f2bdc0fc52272d83749790b6ca372336a1a8c2bf956f9981c5a353a558980bcdbdf51dc81ab27b7a3a36a0290a81f641c190bcc
SSDEEP

768:GUd+9RyfRW4YEPqZtMnaD3xD2O4CDbidp1SwOcAwscmNaCX5ww4M/Z5+WqshU:GbYRW4m13MPSZ2scDCaa/Zpc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059267e61ff8d2c3071963e34f758848

Files

059267e61ff8d2c3071963e34f758848
.dll windows:4 windows x86 arch:x86

671aa2a053dab07cb6e1182c16a9216a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowScrollBar
CreateDesktopW

kernel32

TlsGetValue
TlsFree
ExitProcess
HeapFree
LeaveCriticalSection

advapi32

RegQueryValueExA
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 789B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ