421f702753645af07717ced6edd9f88c | Triage

Sharing

General

Target

421f702753645af07717ced6edd9f88c
Size

218KB
MD5

421f702753645af07717ced6edd9f88c
SHA1

670a251572be5127d9ac37fbb171dbc3e153e3e4
SHA256

2bec64aa019f071aba266a5dc0ebf33802a8c2d08d4afd6c68f38fde23229d32
SHA512

3c3721d56c6ccd286b96811a4f1a1b5fd6a2d89e6a53e6c06839e122a083559465842ee139cc7a85542481dd1687d30ed08ebecba731ac2b270d0fcaddc5e3cd
SSDEEP

6144:qWiGQNxeuaA5tWLCHEEqej2r5Ux8LorfGcDrCr/uy+PoDC1zC/0G9IgN3MUvZXpD:xuaA5tWLCHEEqtr5Ux8LorfGcuuy+PoG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421f702753645af07717ced6edd9f88c

Files

421f702753645af07717ced6edd9f88c
.dll windows:1 windows x86 arch:x86

e54fde7d1bcc8060e8441555f52b4862

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ