199769f29d013991705e657765d687ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

199769f29d013991705e657765d687ff
Size

298KB
MD5

199769f29d013991705e657765d687ff
SHA1

8eb84ff703c53b8f2218634b2c2aeae3b894804c
SHA256

6120872bb716288315ab7eab1e8cd9299d86014d70b5c9c38cd3c05b1d0f56ac
SHA512

8bd569b6a1dd47561b33d69fd8a4f363c8762737a4d064f935a0a80a63cabe9c2bcdaf75193eb070c0888d2fc56bf4723c2ca197982be081476ec69bd8723bd5
SSDEEP

6144:jwdUXrzIA/W0ojFboWCTzPRIQFtDFS5wng+tLKPX8VhjwQ8XKB:jwSPI0AjmWCT1IQFtxLoPsHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199769f29d013991705e657765d687ff

Files

199769f29d013991705e657765d687ff
.dll windows:4 windows x86 arch:x86

29d3b76ab299e1c7d60c60dca2d23817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetProcessHeap
CreateDirectoryA
CreateFileA
CreateNamedPipeA

user32

SendMessageA

Sections

jiNpVblk
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

NjhYaDlU
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bwVgPNFn
Size: 264KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE