02ae2f51682a963cf1464b5d11f936ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02ae2f51682a963cf1464b5d11f936ab
Size

55KB
MD5

02ae2f51682a963cf1464b5d11f936ab
SHA1

0f02e8dbc053666ddaa65380b54556e95d7ef9d4
SHA256

3e20e95f28ad465094427ea2d71e8e36d42673ead5609353af39969e14f86e0f
SHA512

5af826adb00b8c7d3ec47537af4ccc396a18c0911078d12e11859f9ad17f353917a40d3cbdc84f87853e9f4687429cade05cdc155406485a5ff32108688fcce2
SSDEEP

768:xM3T3/1ExtXMjpe0kQSRfRFp1hKpf8QtiHCdv0u/cioIQRAA9KFiCfYToEwaDsbc:2j3nU02fDhKpqkv0uCqb2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02ae2f51682a963cf1464b5d11f936ab

Files

02ae2f51682a963cf1464b5d11f936ab
.dll windows:5 windows x86 arch:x86

a06acd8560019d0f2d0d96dcde270a7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC

kernel32

AddAtomW
GetFileAttributesW
GlobalFree
lstrcmpA
LoadLibraryW
GlobalFlags
DeleteFileW
GetFileType
IsDBCSLeadByte
GetCurrentDirectoryW
lstrcatW
GetLocalTime
LocalUnlock
GetAtomNameW

shlwapi

PathAddBackslashA

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ