4ae468850991f8239e1ed73a4a0db696 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ae468850991f8239e1ed73a4a0db696
Size

65KB
MD5

4ae468850991f8239e1ed73a4a0db696
SHA1

32788cc37fbc33b541b35981090712789fedc4ff
SHA256

dbb70dad72443f034950ae1dddb7eef3857ef82a6dd5f7c203e3f3c305ace4ca
SHA512

d3abf351d616c18f84d3e79fb7d28817d9c1ca3052e3b8db5b6845576c5a3ac19dbe5962c1ed6d3462ccf16572bcdaddf849730485bec0873cb83448f3916dc0
SSDEEP

1536:UQTghGoVnkP5TARQ7gJ0EVqwlKrXVgOBJvpr0idrUTG:UQTKz45TARQc2VgOj0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ae468850991f8239e1ed73a4a0db696

Files

4ae468850991f8239e1ed73a4a0db696
.dll windows:5 windows x86 arch:x86

39c3002e84450d368d9676a2f9e501cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

GetMessageA
SendNotifyMessageA

Exports

Exports

Ijavucccn
Inehclpe

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ