0253d04e8d2e0e37476ea6d906aa30e2 | Triage

Sharing

General

Target

0253d04e8d2e0e37476ea6d906aa30e2
Size

5KB
MD5

0253d04e8d2e0e37476ea6d906aa30e2
SHA1

c9fa3afaff47e70f8ffec2b55cb3829841a70990
SHA256

6c697b24b7ae1959ac0cb9fe2b64cbe53fc979662bbb5fba832ca80db50bebe8
SHA512

f930942e6691287db0ec5f3510c2028b052ca40b29451fb38e0e1a9e11f20ad52fda665db31ea924c510f2eb5b83d3bfc2eaf1c5c60bc7779afcd4b216e88ebf
SSDEEP

96:D/xIrg4bS/1JExzn5GUrVrrsyk46k9XKag8gLuHrV90kkTErjQ:D/ek4bS/1JEpn4K5rnXKaKKp9VnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0253d04e8d2e0e37476ea6d906aa30e2

Files

0253d04e8d2e0e37476ea6d906aa30e2
.dll windows:4 windows x86 arch:x86

6fe67ca756939cc4f85b85e2c76db54f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetLastError
Sleep
CreateThread
GetModuleFileNameA
LoadLibraryA

user32

CallNextHookEx
SetWindowsHookExA

advapi32

RegOpenKeyA
RegSetValueExA

msvcrt

_initterm
_stricmp
strrchr
free
_strcmpi
malloc
_adjust_fdiv

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ