267c04c78a7eb2967fdf52a76f40a479 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

267c04c78a7eb2967fdf52a76f40a479
Size

96KB
MD5

267c04c78a7eb2967fdf52a76f40a479
SHA1

783198e105ea9eb5481589b8163d9ee148aed456
SHA256

7ff4c38cb12fc384470f4dd0a9ca31d07f8294ff23f040337031ce440e6aea8b
SHA512

039f4be1fce86a534804126b1e271ab2f0c9373c34aaa7a5d47afd8a41cf758b23412ab4ccc820ca92c41bc84869c7bebb98bd447474b89508dc49ffc905c53a
SSDEEP

1536:W93qI5xOalzRGIGrGQDhF4wEPVucP6jTvo9t65nWZUZCToBwo0VhL61:WVqI5b2XL/EtucP6QDxUZgoBwo0VG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
267c04c78a7eb2967fdf52a76f40a479

Files

267c04c78a7eb2967fdf52a76f40a479
.dll windows:4 windows x86 arch:x86

65abd7392341657a83019a4aea37278a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumCalendarInfoA

user32

MessageBoxExA
CharPrevA
wsprintfA
MessageBoxA
CharNextA
LoadStringA

advapi32

InitializeSid
RegCloseKey
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
RegQueryValueExA
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
GetSidLengthRequired

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

hxhkymnkr

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ