20265499fc242d0f5bed69744144f772 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20265499fc242d0f5bed69744144f772
Size

13KB
MD5

20265499fc242d0f5bed69744144f772
SHA1

7e6f789b771c28e63e28ee3aa2a23d1a99f261e7
SHA256

53bcc57a4f5331210557237375e646e60303f3c1a0a679d30cbd53ce8169de27
SHA512

c33a0336fdecd018b5af704c71f218159d74054d6420611d6f645ef81c1b73d7cc922284601f22f1736a20610373e2ad78d16505d99a4e180aa245cf24d7de53
SSDEEP

192:M7iVibueoHa7ooZwElZK9VBFj25OnB0V/eiOQl+OzGd2jg:M7iVioHCooZw06BFj4OnB1++OzGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20265499fc242d0f5bed69744144f772

Files

20265499fc242d0f5bed69744144f772
.dll windows:4 windows x86 arch:x86

2c3e03da38f3e39ed82950d78bfd2723

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

UnloadKeyboardLayout
OpenIcon
CreateIconIndirect
CallWindowProcA
AdjustWindowRectEx

kernel32

GetModuleHandleW
lstrcpyA
Sleep
CloseHandle
CreateFileA
DeleteFileA
DeviceIoControl
EnumDateFormatsA
EnumDateFormatsExA
ExitProcess
ExitThread
GetLastError
GetModuleHandleA
GetProcessHeaps
HeapAlloc
InterlockedExchange
LockFile

gdi32

GetBoundsRect
GdiFlush

ws2_32

gethostbyname
socket
setsockopt
recv
WSASocketA

Exports

Exports

frunkuf

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ