401b6fb821e5d9d80897629f1f47b522 | Triage

Sharing

General

Target

401b6fb821e5d9d80897629f1f47b522
Size

94KB
MD5

401b6fb821e5d9d80897629f1f47b522
SHA1

d49a93af7dd5ab78cabebcad99c509dc5c64dc2e
SHA256

eb086044948a1033e86b706a9557ed28827c7d4b7878ae6dbe3fc92b3ed53fc2
SHA512

9470edb72f040dc57799a58ffbc24f07b2affefd304de8855518271b181f4a714cab3e5a323dbcdac8d724d2aecceb8e4f3bb72b764a60f3e529532fda7a4183
SSDEEP

1536:VNXE1SAhZYjHcXRyY4OlPlwf3fYxmExXuiqr+k9mYQiCo3dQ3ZnV:VWEjHcXVlygME0cym3i33dQJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401b6fb821e5d9d80897629f1f47b522

Files

401b6fb821e5d9d80897629f1f47b522
.dll windows:5 windows x86 arch:x86

15a75e0d39d18b612db21b10383b474b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlUnescapeW
StrFromTimeIntervalW
StrFormatByteSizeA
StrFromTimeIntervalA
StrFormatKBSizeA
UrlCombineW
UrlHashW
StrCatBuffW
StrDupW
UrlGetPartW

user32

GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 75KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YU
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE