0897deafb9c4429d9b2b608f41cdf0ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0897deafb9c4429d9b2b608f41cdf0ce
Size

39KB
MD5

0897deafb9c4429d9b2b608f41cdf0ce
SHA1

ab1fa899ae64ea2a330b2dd0348feb16d72d2378
SHA256

2909cd1ae6e95234dac7007162e0d5772fd8eaf529942d450c6eaff1e506f4f3
SHA512

54d3be0229ee9ca11928fbe8254779854a7fd926bc37316c09c773944cd3ee52e40df5b8a41c7c33e8c44e8f1522ea30461956c36336f1e1884e163aec3b64a4
SSDEEP

768:Inx+tKfaG7DutYA15YLYHLcG0tlAzek4LvzHRF8H3p2Y8Jtr:I+hGKYMXrchaZ4LLHRF8H3p29r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0897deafb9c4429d9b2b608f41cdf0ce

Files

0897deafb9c4429d9b2b608f41cdf0ce
.dll windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ