494a6200fa8d041b639b03abf6e926bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494a6200fa8d041b639b03abf6e926bb
Size

80KB
MD5

494a6200fa8d041b639b03abf6e926bb
SHA1

195dbb1a276b781a904009f5029951e56b2c676b
SHA256

c7082ed3f9a6fa43d349d58057c4c2b2c94c0b798bd9c1a39d3c01a9bdc84cba
SHA512

356d1b247f625bdfbe58d01d79844c456950941b171e3df96380829440eea0956f0ddb59b668dd4c719c8c73e0fa1f5e2b9717a633d2b61485103f135e223eb1
SSDEEP

1536:/uGuWc1BH9auJkQS7CiH94hCBMjcgxLlteMVfvtrmsRE:GGuD1V9bJiCiAcgxx42fwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494a6200fa8d041b639b03abf6e926bb

Files

494a6200fa8d041b639b03abf6e926bb
.dll windows:4 windows x86 arch:x86

18904c7c7f2f0242ba84a0cb624f1726

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA
GetDesktopWindow

Sections

.text
Size: 46KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ