081b52aae94e5adfae50ad0a8744c9fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

081b52aae94e5adfae50ad0a8744c9fd
Size

24KB
MD5

081b52aae94e5adfae50ad0a8744c9fd
SHA1

982a65b1e85754d6640cb0bb1402eb8c04673543
SHA256

d4d93da9ce832ec0a47f2210905b21c0db08e99b618cec9ddbfe2ac104958b70
SHA512

1244ea2966d2b0104b999163e2911ae213e92ece52ae1f77ff8b440cfd6497b33071e21afc307778e914655d5a63604884e482821b2b1d25d74b814b6942ecd1
SSDEEP

384:fDyf5QHH7jIR0hmjdPRkkMv8dLLOgvHGk/2z7QYxx0:2xQHbSIOdPRB5pZvHz/2YR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081b52aae94e5adfae50ad0a8744c9fd

Files

081b52aae94e5adfae50ad0a8744c9fd
.dll windows:4 windows x86 arch:x86

ee2bf920917f70362b3e8f39d6bc150a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

BeginPaint
GetDesktopWindow

gdi32

GetPixel

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ