0399222423f5c908c4166c9d5c5dd715 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0399222423f5c908c4166c9d5c5dd715
Size

7KB
MD5

0399222423f5c908c4166c9d5c5dd715
SHA1

fb38aae4de571970e1baa0e095f8b4eec9295d26
SHA256

dcd3b580e0015d7ac0cea982cade70c0a74765f8982ba6dcfbd46cd84f4fad41
SHA512

fb6a6b4cc23f4d3beb36ea4262b261dd1fdab68a71ef1d3a7962633f012c247249ecbb88a8297a4e5caab6816759fa17f6979325bd21795aec22230ad8d8e205
SSDEEP

96:Htt1lltHzxTSZPmAEdjY7ZQsmOLEafhCl69:Nt1lFTSZP2duQ2LLMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0399222423f5c908c4166c9d5c5dd715

Files

0399222423f5c908c4166c9d5c5dd715
.dll windows:4 windows x86 arch:x86

af1186ead1cc5a71f7bc4452086ae8f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
VirtualProtectEx
GlobalFree
IsBadReadPtr
GlobalLock
GlobalAlloc
GetCurrentProcess
CreateThread
GetModuleFileNameA
ReadProcessMemory

user32

EnumChildWindows
GetClassNameA
IsWindowVisible
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
SendMessageA
FindWindowA
FindWindowExA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

strrchr
_adjust_fdiv
malloc
_initterm
free
memcpy
??3@YAXPAX@Z
strcmp
strlen
??2@YAPAXI@Z
sprintf
strcpy
_stricmp

Exports

Exports

fa
fc

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ