11374b506bd0acd4f154981e5e55cd8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11374b506bd0acd4f154981e5e55cd8e
Size

99KB
MD5

11374b506bd0acd4f154981e5e55cd8e
SHA1

7a79891e790ed8b5c13eac47a64b814b2e661977
SHA256

bbf06bfb16c66ab033f4731fd96ca77c55c6261adcaccb6257b897959acb5621
SHA512

d5cb3ba87c15d8fd2de22715f0cc4990866ac54ebf2c7b48d8ff7482a3c976c735c32ddbf178327142796940abef1c045bc829e575539aa5d4eca3628eec7970
SSDEEP

1536:rGjp4DCG4GJes28P058TEd84XM8gWgsC/qyBPy4brG+K/3Qc/+07ayqznIRV4sm:Ip4GwZH0Ld819/Na4i/3QCayq0RV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11374b506bd0acd4f154981e5e55cd8e

Files

11374b506bd0acd4f154981e5e55cd8e
.dll windows:4 windows x86 arch:x86

bac2a227bc3530d1ff569b5b34c8c645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetTempPathA
GetThreadLocale
GetTimeZoneInformation
GetVersion
GlobalReAlloc
HeapAlloc
HeapCreate
InterlockedDecrement
LocalFree
LockResource
WaitForSingleObject
lstrcatA

user32

CallNextHookEx
CharUpperA
CopyRect
EmptyClipboard
GetActiveWindow
GetClassNameA
GetDC
GetFocus
GetMenuCheckMarkDimensions
GetScrollPos
GetSysColor
GetWindow
GrayStringA
IntersectRect
OpenClipboard
SetWindowTextA
UnregisterClassA
WinHelpA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 1011B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 905B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ