430d96d285068198b1df71119277031b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

430d96d285068198b1df71119277031b
Size

67KB
MD5

430d96d285068198b1df71119277031b
SHA1

0bd317754c779ff2238297074df98baafe3c6bd0
SHA256

028d97b83048adc486cd5fd570eb315bfa4f47b4a5f34b304e1f314a5796bd2e
SHA512

d85f4b8026d2dd002aa237ff60d0db9a4edfce74642feacb454e8a5c857dcd2a9f1351b2d63e5943255263b61453a52689358ce832c62ad0abb7f448fc4a970c
SSDEEP

1536:6kISyZcdbACWMgI7vlgB3hdlcG/SUcWREwna4V7eLnkffZ:6kBAuiBRPv/SGR2ix3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430d96d285068198b1df71119277031b

Files

430d96d285068198b1df71119277031b
.dll windows:4 windows x86 arch:x86

fe81dc07121a9d158bae8bd609ef5c71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
GetACP
GetCurrentProcess
GetFileAttributesA
GetStringTypeA
GetTimeFormatA
GetVersionExA
GlobalFree
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
MultiByteToWideChar
SetLocalTime
UnlockFile
WideCharToMultiByte
lstrcmpiA

user32

DispatchMessageA
DrawTextA
EndDialog
GetCursorPos
GetForegroundWindow
GetMenu
GetMessageTime
GetPropA
InvalidateRect
MessageBoxA
MoveWindow
PostMessageA
PtInRect
RegisterWindowMessageA
SendDlgItemMessageA
SetMenuItemBitmaps
SystemParametersInfoA
UnhookWindowsHookEx

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ