15b4e8f8c78517195796251d8c2a6016 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15b4e8f8c78517195796251d8c2a6016
Size

24KB
MD5

15b4e8f8c78517195796251d8c2a6016
SHA1

59b4a007f19863e7bbe900dae7170a6c75b63bbf
SHA256

3335b0edcdc40a7b29afe440bc13aaa5625dd1d038160d44b0adae16b5751941
SHA512

a2c69b2b3c1c69bd468939c0ad86e698464534e42cea552969791b2567b4de1835823f9705494f0ded8691b34fe8b797313bb7c424df7d8563377f7800592a6e
SSDEEP

768:kywD/PRp/0ipsEftZR+33opRpFutku+kv:k5/PRHsAVpRLuCu+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15b4e8f8c78517195796251d8c2a6016

Files

15b4e8f8c78517195796251d8c2a6016
.dll windows:4 windows x86 arch:x86

7475697cf1dea9b402f23a6bfa833be4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ