119f9bfc8707728bac66e1bce2de02f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

119f9bfc8707728bac66e1bce2de02f1
Size

50KB
MD5

119f9bfc8707728bac66e1bce2de02f1
SHA1

9dc24ff2f3afd6c3e2649aacf1a7db98282f59be
SHA256

94e005feb614a5aec8a23bdb15a2ca2b941b59679b6e4e7c494613802a26a33d
SHA512

382f066e350950a2cf0154dc462685710ffa2cd5af26300cf7c7b64ed7fa7fdc51bdd4351ef4127c6e044eecbde59a2e31712abccc21e2b09a2f36e31c3f43ee
SSDEEP

768:x7cX+YwEbDQj4GC29kW59UGl0mvomzrfWv5eT9NgaTyOLIfNJh/0:xWi0QX7kWHjltVfW00QyOLaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119f9bfc8707728bac66e1bce2de02f1

Files

119f9bfc8707728bac66e1bce2de02f1
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ