0659968d923826d8b9755c81fd2adde5 | Triage

Sharing

General

Target

0659968d923826d8b9755c81fd2adde5
Size

56KB
MD5

0659968d923826d8b9755c81fd2adde5
SHA1

56edbb93b144d952359520a0e98f6e5532c25c2b
SHA256

c42b0a29979de89bf845cfdea6d179d34b7a90a9c15acf1660cf6905aa09b4e5
SHA512

ef87f93f2f48f790044de70cdbddd76ef7c40cf7eab5d00f8417447cd12b10a108efd4b0af3248c2eb59fc91fdfab2fd91edd650541312a636ef1aa6a7a56cda
SSDEEP

1536:BfQAl+7ovOdaoK2yd44GK25QMVLv6xjAZ8N0q7RRo:dQAl+pcDFGVSILv6xg8To

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0659968d923826d8b9755c81fd2adde5

Files

0659968d923826d8b9755c81fd2adde5
.dll windows:4 windows x86 arch:x86

d789bbd14d9363f075bb8a0efcaa628b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

time

user32

UnhookWindowsHookEx

advapi32

RegQueryValueExA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE