1446e8465d2d98f5d71cd2dddc813b61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1446e8465d2d98f5d71cd2dddc813b61
Size

109KB
MD5

1446e8465d2d98f5d71cd2dddc813b61
SHA1

7a0a9909779504a7670a64cd50227b451a346496
SHA256

d97e29b49a7c25876abc5380699c27af0910cdde2a3e9095b3d6c46852a3ee7f
SHA512

133bb20d3ab508135e381e5eaeefaf00db013b59f16a8bf8a273f414bf5264e71b44168923052df33ed21c5ec36d8c960241dd620f6668e9f4857275f896ef14
SSDEEP

3072:rCODeODZn/ABzZ8I3PL9alEI7+EX/MoWAOsgw:W6e8on84ZreXlWAtg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1446e8465d2d98f5d71cd2dddc813b61

Files

1446e8465d2d98f5d71cd2dddc813b61
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ