01af8532c140259030a0a8b8f21e7284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01af8532c140259030a0a8b8f21e7284
Size

59KB
MD5

01af8532c140259030a0a8b8f21e7284
SHA1

ca6f7f2ed2c2a6951ab266db061d37e178562251
SHA256

eb292956b8d5db867394bbbc4c2528db5b1b5c5613d6c4b718d589aaa1e9f658
SHA512

b5e2a63c3bfed9545d4896bf0a5f161e0c54d1e825146d2d2da611632a426bbd5087a379dd9cf6df02dfd52a03d7696053f00ab4f0e0fa8d9ef953697cefa3fa
SSDEEP

1536:QUNF84OMty84KgCEgsk0t4yr95JVk5P/p:QC/yBIjF0x9W5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01af8532c140259030a0a8b8f21e7284

Files

01af8532c140259030a0a8b8f21e7284
.dll windows:4 windows x86 arch:x86

f1a7c45fc327025cccf6d19a02df8176

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW

advapi32

RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ