1785de6997ddcc9c3b6414d66c458b3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1785de6997ddcc9c3b6414d66c458b3a
Size

20KB
MD5

1785de6997ddcc9c3b6414d66c458b3a
SHA1

2808d3a1c870ce835a3e061308570db22cf004e6
SHA256

785445ff9f2790ad149889cdde37acf5ff6e67f834376478393eaab7f0765791
SHA512

1042ae8d279689018e30fa82320e5ed3421e8d213afb534b2750aab57084150d3e068bd3b9136266724c4100118a45d7963b29e0b883d8c5632b1fd6d3b5d280
SSDEEP

192:WdIDOrpxCI5LfRKjDAJ06SHMXRRthFzA2dp+d8A1AmCUEM7:3OrrD5Lpi0JySRRthFzA2dp+d888UEM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1785de6997ddcc9c3b6414d66c458b3a

Files

1785de6997ddcc9c3b6414d66c458b3a
.dll windows:4 windows x86 arch:x86

670cd772371b77486de23d3d5199548d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
Beep
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ