492cb978978170440b4d8ef543e55c07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

492cb978978170440b4d8ef543e55c07
Size

51KB
MD5

492cb978978170440b4d8ef543e55c07
SHA1

de7d45a5abf78114f465c4955d5ec70ea946c8a2
SHA256

72817d3a9ed48aab0a95878c6983e6f6f526ae949f24e29f9fcc70ac4a2fbcfa
SHA512

27b2b641ee6adbdadfcf9158790506eca8593314d060ee91b2695c99247dd79e4558054ba58e07fe2151ed1a216ea227531ac657b1b1bb5c9c4e91e2b9573bba
SSDEEP

768:2bXYeznjFNVPx7iA015r4pMfOZimWHW/tYZ26Sc/H3ztrnA5FH:YFNG15O6p21o3/H3z1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492cb978978170440b4d8ef543e55c07

Files

492cb978978170440b4d8ef543e55c07
.dll windows:5 windows x86 arch:x86

b9a2a179dfc8495b09d28f93cda43ad5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlGetPartA
UrlGetLocationW

user32

MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC

advapi32

RegCloseKey

shell32

SHGetDiskFreeSpaceExA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ