0866c157ab799b0aa9d0ed514d07d695 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0866c157ab799b0aa9d0ed514d07d695
Size

70KB
MD5

0866c157ab799b0aa9d0ed514d07d695
SHA1

7bffa8bfded4e1ffbff535e2660b5295619149f7
SHA256

6cd7f8d5efde86d48de38b5db13e0980130974eb89c42193078bdb27370a4161
SHA512

3dbaa7884131206adc4089869b58766928778593702ab0017cc92d45863c7c620dc611b505a26a49893acbad55428ee8ce0e23e6f104116a26af7d43a4eabe01
SSDEEP

1536:sAHE1ZewiZ0S57q/sWvpJ9hFKTJ2sRPZU7udBLm3:S1LekJvpfOd7U7udBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0866c157ab799b0aa9d0ed514d07d695

Files

0866c157ab799b0aa9d0ed514d07d695
.dll windows:4 windows x86 arch:x86

4f7217820c3adf85d2f0879ebad7dff1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndMenu
GetCursor
GetMessageA
IsCharLowerA
MessageBeep
EmptyClipboard
MessageBoxIndirectA
OemToCharA
ShowCursor
ShowScrollBar
DrawStateA
DrawMenuBar
DialogBoxParamA
DestroyIcon
CreateCursor
CreateAcceleratorTableA
CopyImage
CharToOemA
ActivateKeyboardLayout
MessageBoxA
wsprintfA

kernel32

SetEndOfFile
GetDateFormatA
GetLastError
SleepEx
EnterCriticalSection
GetTimeFormatA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ