0f83027f59078b527b41beb1962c38b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f83027f59078b527b41beb1962c38b9
Size

40KB
MD5

0f83027f59078b527b41beb1962c38b9
SHA1

635507ed0e2dadbcee892363c83d7edb7995c5ad
SHA256

05d8e232cea45f2adfde5de8f430ce3ea059db167f888250db800df8d43ac5b1
SHA512

0cbc89b7cb0690af912466992b469de294bceb02370f4f938fc53ebc42368a1592ec9fa3e8b0618e1964c2727dd8519bade57e75cc67ed43ff1964c4d16d15f1
SSDEEP

768:Db+bGkmmthYUMxZCvW6H2XqOS+/WtM1cHLSd1TSs/Pxq:f+LmmQrIH9+IM1oSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f83027f59078b527b41beb1962c38b9

Files

0f83027f59078b527b41beb1962c38b9
.dll windows:4 windows x86 arch:x86

fd4fbff25564df8cb721b12915701379

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapCreate
HeapSize
LCMapStringA
SetEvent
CreateFileA

msvcrt

__p__commode
__set_app_type
_cexit
srand
sscanf
strspn
time
_XcptFilter

user32

DrawIconEx
GetClassNameA
GetSubMenu
GetSystemMetrics
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
TranslateMessage
DefMDIChildProcA
RedrawWindow

oleaut32

SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLi

shlwapi

PathBuildRootA
PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA
SHQueryInfoKeyA
StrSpnA
StrStrIA
StrToIntA
SHDeleteEmptyKeyA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ