1e29431456ff0832a62f9002e9b8db51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e29431456ff0832a62f9002e9b8db51
Size

61KB
MD5

1e29431456ff0832a62f9002e9b8db51
SHA1

3f5e7287f8be547e8154d66be768da74bb9abd97
SHA256

c62b83c34e86a1527b4643e1d9fe9c7bb5f7f46522aaf7d59404170235887ec6
SHA512

545e08703755da542e33ad7c40ff5e5463923d4fec0a8f18b8d6ffaaa076c45e8896d1288471a9e5073c2b4446d0ae5ede0772bc759bcc38a7ff81149854fb8b
SSDEEP

768:/aluaTWBwhMNqiR4lZVb/DYNBedNHveftNgD6AfIiVYoQyUYRX8eRWAzfExS:/AuVaoZYV3mgkekoQy/l8fIExS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e29431456ff0832a62f9002e9b8db51

Files

1e29431456ff0832a62f9002e9b8db51
.dll windows:4 windows x86 arch:x86

3d272a52023a5a920a3b4cb5f29185b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
DestroyWindow

kernel32

HeapFree
GetVersionExW
ExitProcess

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ