1544d479abec620164ea0036ea2782a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1544d479abec620164ea0036ea2782a6
Size

83KB
MD5

1544d479abec620164ea0036ea2782a6
SHA1

82f929ce8ac093247ac9c4592fc1e9e684d3a0df
SHA256

ab021b04d4df1446eda54dee629c6afb7aba58d25ef26ac624a537cd08f5dc8f
SHA512

ff74a95c8ca670eb700b4a13940ee307c5600d3ef8e2b2e68f007cbe35b8a584cf1aa29f3203e805349928e5f44742cb2a5c88756de1848e0455d87d5e7e5101
SSDEEP

1536:MeVf48VqbBahe3+JOGxlP6rAbF1+eBUanfitkSzNYZ+KyJk5sDOAPvJqND:HVqdCO46Eb+e2anKtklZOa5snwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1544d479abec620164ea0036ea2782a6

Files

1544d479abec620164ea0036ea2782a6
.dll windows:4 windows x86 arch:x86

3fbbfb020b072c9609d8d0b67aa5d81a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDlgItem
EndDeferWindowPos
DestroyMenu
DestroyCaret
CreatePopupMenu
CopyImage
CharUpperA
CharLowerA

kernel32

GetStartupInfoA
HeapAlloc
GetTimeZoneInformation
ExitProcess
EnterCriticalSection
DebugBreak
SetEnvironmentVariableA
LCMapStringW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ