152e64eaae5b40833f8ddc601d83ac6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152e64eaae5b40833f8ddc601d83ac6f
Size

90KB
MD5

152e64eaae5b40833f8ddc601d83ac6f
SHA1

5ece40a43d560beea5ea1ebca34e789d0f826808
SHA256

b7a93404eebe0b9a7323d1e2454d738f140ff47b4e8ab2f859fc5f668af3d6b5
SHA512

b686af415842a34e090d3150d7e096152551aee91771d3db749e831bd008964de621a29e0ae93b21c0d64c8911af6a03d5eafe889a57b88fae007dbdcddfb9a5
SSDEEP

1536:PmDpbbwmG72hMUwMj+G7NPFBh8H0Hhra0jk+wFx5c46EELGU3iImgauntI21Q8/j:UTG7WXj+8NdBh8HWhrzjac4CvauKpal7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152e64eaae5b40833f8ddc601d83ac6f

Files

152e64eaae5b40833f8ddc601d83ac6f
.dll windows:4 windows x86 arch:x86

94347360f8c710ff496394d9295c69df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawCaption
CreateIconFromResourceEx
CreateIcon
CreateCursor
CreateAcceleratorTableA
CharPrevA
CharLowerA
ActivateKeyboardLayout

kernel32

LoadLibraryA
lstrlenA
lstrcpynA
lstrcpyA
WriteFile
VirtualFree
VirtualAlloc
UnmapViewOfFile
TlsGetValue
EnumResourceLanguagesW
EnumResourceTypesA
FindResourceA
GetLocalTime
GetModuleHandleA
GetVersionExA
LocalAlloc
MapViewOfFile
OpenFileMappingA
Sleep
TlsAlloc

Sections

.text
Size: 18KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ