44cd3d47c308cb4a78880daab910e8fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44cd3d47c308cb4a78880daab910e8fa
Size

69KB
MD5

44cd3d47c308cb4a78880daab910e8fa
SHA1

74e1c95a613b2d66770907317dfad0fe14fb7c04
SHA256

60a3f971d2b4ebbc71626bdcdc9e1f330cf68222b0f1f68e2661eb49889010a1
SHA512

03f03120dc6c0618413444a4fc84c32e82526fd6818cda03533983c74a7301755dfe476aa952b56c7fff4f79535a09da5b80a9d1e2a67f902972fd0829d73fc0
SSDEEP

1536:XIbjWau9PCVuD3y527FXJX74v2Vrf5bXnN2bY7VkUGc:Bau11D3y5ShUufR9yN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44cd3d47c308cb4a78880daab910e8fa

Files

44cd3d47c308cb4a78880daab910e8fa
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 43KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ