3735410adff6cd6aaa7781cb9c498727 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3735410adff6cd6aaa7781cb9c498727
Size

86KB
MD5

3735410adff6cd6aaa7781cb9c498727
SHA1

868254a868d0d64d3a35bed78ab38cb792dea01a
SHA256

504efc70164c723293d0d1126eb2cca501bcd83a27e36512c83aa5ec5bf256d0
SHA512

b319228796c3e6e22f8751186ad76f89fb00a7133963ad10467be90febbd933b7408b4dff13210a916de260260638a94127e10197a276112ca28ab45614ec416
SSDEEP

1536:a7OpmQuV0fIsFEk3FKQs0BfTU9ghlEQt1Y3o6jyxr0OEXmdsdPYZVhHPLfswGi1Z:dmQdvts0iYE0RfrFvdsdPYZzDfsNi17l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3735410adff6cd6aaa7781cb9c498727

Files

3735410adff6cd6aaa7781cb9c498727
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ