1a0ead56797387f8bb501c41a3fb0fef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a0ead56797387f8bb501c41a3fb0fef
Size

36KB
MD5

1a0ead56797387f8bb501c41a3fb0fef
SHA1

308a259dd5cb7ff5afebf6b9bd988e36a96a286b
SHA256

3826b17cee694a02b63f71e888a1f5ec5679d7d998243619f5a0ac9b951b31d1
SHA512

b2f70242fa957d72f5b715c5692e7f28b7c916caec0985d9fab08adafadfcc7e808a350e64caead306849f9ae98e99cdcecf54f622dc642228eea9da2cb7db47
SSDEEP

768:1TKSc4sjrTlzdqGPQUgH+SgEU4Zqe6s1zCNdU:18V9RttgH+yoe6K2vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0ead56797387f8bb501c41a3fb0fef

Files

1a0ead56797387f8bb501c41a3fb0fef
.dll windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE