380c6c0f8b96203a4c970ed5500deb59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

380c6c0f8b96203a4c970ed5500deb59
Size

25KB
MD5

380c6c0f8b96203a4c970ed5500deb59
SHA1

702f1097b2443cf8deaec07ca93b9db4f190699a
SHA256

aec1f0e7a7ca0118378ac547fa53856e18d9aaefe83761718e910f5784522c65
SHA512

282d91234e1897b875f5cd8d5804f6fa7c55df6c257a082f40d0a1a012e167c129b75950b70b684169ebf35bd6d2acbff55382afadfd8f150b26527d7797b551
SSDEEP

768:0TkvRKB8vKGqAQ6X21aUvjPYTFgMcCDpFIU:CkvRKB8vUDuQaKMFGClj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380c6c0f8b96203a4c970ed5500deb59

Files

380c6c0f8b96203a4c970ed5500deb59
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE