380963de0428b5491d15ec1838eca073 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

380963de0428b5491d15ec1838eca073
Size

27KB
MD5

380963de0428b5491d15ec1838eca073
SHA1

fbdf75c05a10ec112a4a520d162d724e5e79402d
SHA256

167a5de4a611c923883d419f3cbee8576c56703661015bfa1cb9a2ef981c36a5
SHA512

9f3593e2e7801cca4f70307b2e74d080770da8b7f893b9af8b26db49c73ff0e4c611df43483ff63d8500296331089eadcc7301f5b923808b1679f38cac225fad
SSDEEP

384:/9myvbGcCLojkfpOlCQNh/edOTMQUbInFCUvkGg/eRJ4VeU46skl:VDK3LoofUXNhmKMQU8nFCmIqeeU3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380963de0428b5491d15ec1838eca073

Files

380963de0428b5491d15ec1838eca073
.dll windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ