45df84b4c78bb78b5a4e062229d3df12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45df84b4c78bb78b5a4e062229d3df12
Size

252KB
MD5

45df84b4c78bb78b5a4e062229d3df12
SHA1

79ceeefe6eabc1bdd4942350f4fe8e3133ba608a
SHA256

cb65938cc5707df847190ebe793b56dc95d13bfdd72d4ba61b1ce4fa402ca56c
SHA512

6b0c002c0c5d206301b1c0c25a6f978ff6f79256b8ab0cacc4c02bbac193e8bf772064430f7f51fd86da380829a57a0aab27815b83c242eb016469cd2ff1c86b
SSDEEP

6144:/cuDEFwUWRDezeJgRvxUceihnGSGVxHd7uGQ:kuDEFwUWRet6onGZzHRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45df84b4c78bb78b5a4e062229d3df12

Files

45df84b4c78bb78b5a4e062229d3df12
.dll windows:4 windows x86 arch:x86

69bc3cfe7cca88bb521c0a3a5dc537fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

msvcrt

memcmp
clock
exp
mbstowcs
wcscspn
fabs
acos
tolower

kernel32

VirtualAllocEx
GetCommandLineW
GetCommandLineA
ExitThread
IsBadReadPtr
lstrlenW
LoadLibraryExA
ExitProcess
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
IsBadHugeReadPtr

Sections

CODE
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ