371442ea2ebd9abf02c1963d778498dd | Triage

Sharing

General

Target

371442ea2ebd9abf02c1963d778498dd
Size

99KB
MD5

371442ea2ebd9abf02c1963d778498dd
SHA1

a70c386a6921a293c485c02f0a081bfb007907fd
SHA256

b23db72e5c40f6386661864c529d93e120025cf62bd2c8ba021c8a073bb12504
SHA512

80542cc3ba69fafbe0387484f9a7c1eb4dbf93059769dddca6824af4059834de9f618f4713e05c14eda39c02fac5227b96006b802e219c0b216ead5f34e66736
SSDEEP

1536:PvJtA57M+JMNNfDIncEvxBvRoS8bkIWK4IRUGKlET6mpXk+jgL8xqXEw:PvJtA5AiSDIc+BvRoS8RrhKm+iJbqEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371442ea2ebd9abf02c1963d778498dd

Files

371442ea2ebd9abf02c1963d778498dd
.dll windows:4 windows x86 arch:x86

ad2059b23608eda74b892daf002396c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DialogBoxParamA
DestroyIcon
DestroyCursor
DeleteMenu
DefDlgProcA
CreatePopupMenu
CreateIconFromResourceEx
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyImage
CharUpperA
CharPrevA
CharNextA
ChangeMenuA
ActivateKeyboardLayout

kernel32

FindResourceA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
TlsSetValue
TlsGetValue
TlsFree
SetEndOfFile
SetCurrentDirectoryA
ReadFile
OpenFileMappingA
OpenFile
MapViewOfFile
LoadResource
LeaveCriticalSection
GetVersion
GetSystemTimeAsFileTime
GetSystemTime
CloseHandle
EnumResourceLanguagesA
EnumResourceNamesA
GetLastError
GetLocalTime
GetPrivateProfileStringA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE