0856e4bb77965f3e45ecfe4e3e779c31

General

Target

0856e4bb77965f3e45ecfe4e3e779c31
Size

84KB
MD5

0856e4bb77965f3e45ecfe4e3e779c31
SHA1

6b6033b9b4dd55c85a876613b3e6ecaf09216dbc
SHA256

e75d2ae54649a5570f1e2b0352e9a14c52e894846a6724f90b5a01f9adc3d1e2
SHA512

5d77f6377a1fe3b157c8221d1119ad9aa83a5b5dacf4c682f713429a0bb296276e30abe0dd47b3ddb5a22e03d3ddf2fb85265bf276532d91de74a74941661f02
SSDEEP

1536:FIcG8nF1wZXwqdpJ25jHXXBr7XZmzqcKIKngJFQNEpwodcH:FIcPnPw20r25LXXB7XIzEIMgJWOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0856e4bb77965f3e45ecfe4e3e779c31

Files

0856e4bb77965f3e45ecfe4e3e779c31
.dll windows:4 windows x86 arch:x86

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteVolumeMountPointW
EnumResourceTypesA
ExitProcess
GetACP
GetBinaryTypeA
GetCommandLineA
GetCompressedFileSizeW
GetFileAttributesExA
GetModuleHandleA
GetProfileIntA
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
VirtualProtect
WriteFileEx
_lopen

user32

SystemParametersInfoA
SetMenuItemInfoA
SetPropA
GetSysColorBrush
GetSysColor
GetClassNameA
FindWindowA
DrawEdge

comctl32

ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_SetFilter
ImageList_Read
ImageList_GetImageInfo
ImageList_DrawEx
CreateStatusWindowW
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_SetScrollProp
ImageList_Add
ImageList_Copy

ole32

CoFileTimeNow
CoTaskMemAlloc
CoGetMalloc
CoCreateInstance
CoCreateGuid
CoBuildVersion

dbghelp

FindFileInSearchPath
ImageRvaToSection
SymEnumerateSymbols64

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84f6e1e1247ae012232c91f5e0822713

Headers

File Characteristics

Imports

kernel32

user32

comctl32

ole32

dbghelp

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB