1925582a4a4f851b8b80400e4f5f529c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1925582a4a4f851b8b80400e4f5f529c
Size

88KB
MD5

1925582a4a4f851b8b80400e4f5f529c
SHA1

39a89990d5efae106de9f113f98fb54f56de8113
SHA256

e61b513e993029e7074174c4a8271c99e9435f08fdc6c9eeeb13e482216030b9
SHA512

1b238d61e72716197145360f19bab6467f156c34b12cb73bdc79d8eebd0db23ed97a18626818b8aa91547de18e511f42f9ef055f729162047ebc0c1b9a6058d4
SSDEEP

1536:d0nrSa5LgKGpEsJrPJLZ0pmmwA0rjQE/TMbHP1ri3d8OjOFKJHXFVcP:mnrQTi+rPJLwmmPE/OZiKeOkHIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1925582a4a4f851b8b80400e4f5f529c

Files

1925582a4a4f851b8b80400e4f5f529c
.dll windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ