2ae044267e1f7c8f462667ef60e0e668 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ae044267e1f7c8f462667ef60e0e668
Size

63KB
MD5

2ae044267e1f7c8f462667ef60e0e668
SHA1

68256759ac91a50383cec92e1e6fe9f3e009a381
SHA256

2998a757f5e2c15a1ed60a552ada0441377b0c6724ddb59e3729f5cb6e5e78fb
SHA512

8b7478c612ae326d4e1ac67e22b6aece949acf572200418c135daa73c53e62a737fbebb22019f2615e3963d8bb50d3055533d67a97e756f67ca1c495be6a7220
SSDEEP

1536:kZY9KsHzuIf3DUvTFjSyVavgm5CnvIMGn9jq:k+osHz/0tSy+5+IMG9jq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae044267e1f7c8f462667ef60e0e668

Files

2ae044267e1f7c8f462667ef60e0e668
.dll windows:4 windows x86 arch:x86

6ff1543d6d95b6dfc2ab26330fa5ba84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
EmptyClipboard

kernel32

InitializeCriticalSectionAndSpinCount
TlsAlloc
TerminateProcess
LoadLibraryW
HeapSize
HeapFree
WaitForSingleObject
CloseHandle
DeleteCriticalSection
ExitProcess
TlsGetValue

advapi32

RegSetValueExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ