05f47900596943600f6200355675e62d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05f47900596943600f6200355675e62d
Size

24KB
MD5

05f47900596943600f6200355675e62d
SHA1

ff97835cb50bd73e3cddc72cfcecdb09ce2716f4
SHA256

71c79c9e845ada065f1a8e04cb797ad7544f8b464286c3ea1f0a94005a1131c2
SHA512

819ff052fc941dd2a75095b77db358ac4e52979e521d8c478c31972e4fb3bd716221da4d5ba4b3e2f909c9ac896e4a7c1776e6be34f836ce37d2e0a7d21ef134
SSDEEP

384:oYeMjyec2GdaoaAWVY7pvBvBvuUEe8T9PgoRsCVVSJ/inoocj0zwstnd:MMhc2yaoLavdeEPgoRpjhnUWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05f47900596943600f6200355675e62d

Files

05f47900596943600f6200355675e62d
.dll windows:4 windows x86 arch:x86

d0801690c506af4acdea5b312433f4c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA

user32

GetDesktopWindow
GetDC

gdi32

LineTo

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ