444b7cebb1c3000cad5145eeb01b22c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

444b7cebb1c3000cad5145eeb01b22c7
Size

62KB
MD5

444b7cebb1c3000cad5145eeb01b22c7
SHA1

223da03d08ab79535815b3dc9da698d030a477be
SHA256

340b2a682faf9028ed4782b80afe2363b0b3cbcd677768c01f5892918f567b15
SHA512

b13f2859d3d7fe6a13f8ab1c055326427e99ebe896dc8eb68f0b719a9e23c88371cf546c60d8e733bcb3bbe60f42e66f502cc9aa4173aaba3647d6da4c061094
SSDEEP

1536:ME2oetPgYKjVfqPbKDKg7EJy1bzLhG8u3NpVd0yKhC:M6uVKjVCWDfAYzL48u4yKhC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
444b7cebb1c3000cad5145eeb01b22c7

Files

444b7cebb1c3000cad5145eeb01b22c7
.dll windows:4 windows x86 arch:x86

22737d5deaa31966dcc5bb1dfc03f06c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
OffsetRect
OemToCharW
MessageBeep
GetFocus
DrawCaption
DeleteMenu
CreateMenu
CharUpperBuffA
CharNextA

kernel32

HeapSize
IsBadReadPtr
GetProcessHeap
ExitProcess
EnumSystemLocalesA
RtlUnwind
TlsGetValue
IsValidLocale

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 985B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ