4033186efab05faec79b1c4340291610 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4033186efab05faec79b1c4340291610
Size

99KB
MD5

4033186efab05faec79b1c4340291610
SHA1

f8ca587875b23d6d1b2a82034e849471f580c427
SHA256

2586a827781bdad9286a84b9f2b27582aef0a8d646c2a6c3bfc697104a4b78f3
SHA512

5f99a863e25f76fbbb96698e415ebab0087e002490ba464e3872a09fe6972752fcf1b87765bda635656c9e2abba1159d43d7997c3c71b38622edc870e2c30b7e
SSDEEP

3072:A3RfgetKT5t1x/RzYkAy5aGputErl8pjn:uNdI5t1nbpBOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4033186efab05faec79b1c4340291610

Files

4033186efab05faec79b1c4340291610
.dll windows:4 windows x86 arch:x86

b15619af6e9316a66cda08e597d9b4ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
CompareStringW
FreeEnvironmentStringsA
GetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalDeleteAtom
GlobalFree
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsBadWritePtr
SetFileAttributesA
SetFilePointer
SetLastError
TerminateProcess
UnlockFile
VirtualFree
lstrcpynA

user32

DestroyWindow
GetClassInfoExA
GetClassNameA
GetMenu
GetPropA
GetScrollPos
GetSysColor
GetSysColorBrush
RegisterWindowMessageA
SystemParametersInfoA
TabbedTextOutA
WinHelpA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ