10f8ba7eb2fde8a47aba419e048eb8ae | Triage

Sharing

General

Target

10f8ba7eb2fde8a47aba419e048eb8ae
Size

2.1MB
MD5

10f8ba7eb2fde8a47aba419e048eb8ae
SHA1

f57713b15045f97b17d7efd5336d0cb381bab608
SHA256

8db63a8127ea9213e07fe28b53760ea29b715858f5aa2ed89050ff7545197298
SHA512

377b8faa022fbff8b21be304b347bacb6c1eb5d21a2a8c2def5023edf82f5dac31374f7216c93417caae7944e56898e02682a7a5925ba1c91856308c56889727
SSDEEP

49152:PVvdWaiiccTlwcu2EFYcDE6Rruxgmrn5fkFh:PVvUdowc9cDbuHn5cFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10f8ba7eb2fde8a47aba419e048eb8ae

Files

10f8ba7eb2fde8a47aba419e048eb8ae
.dll windows:4 windows x86 arch:x86

0edd13ea466c5da67e7da1ec4a9869c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
Sleep
GetModuleFileNameA
CloseHandle
SetEvent
ExitProcess
GetProcAddress
GetPrivateProfileStringA
GetTickCount
IsBadReadPtr
GetFileSize
ReadFile
SetFilePointer
CreateFileA
HeapAlloc
GetProcessHeap
VirtualProtect
TerminateProcess
GetModuleHandleA
LoadLibraryW
MultiByteToWideChar
LoadLibraryA
OpenEventA
CreateEventA
CreateThread

user32

SetWindowsHookExA
CallNextHookEx
wvsprintfA
wsprintfA
BroadcastSystemMessageA

msvcrt

strncat
_strcmpi
_adjust_fdiv
strcpy
strcat
strlen
free
sprintf
strncpy
strchr
abs
memset
strstr
strcmp
malloc
memcpy
_except_handler3
strrchr
realloc
_strlwr
_initterm

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ