4bae1541a3677e929ba0ac89cddbf1c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bae1541a3677e929ba0ac89cddbf1c3
Size

55KB
MD5

4bae1541a3677e929ba0ac89cddbf1c3
SHA1

10c978b6fe03c13c8cb1b523d63806740a92380c
SHA256

6c0b76f14c43b16c72bb8d977b65443424d5aba0e0b8f34fdb4d0ad931d5b630
SHA512

397e76ff000cf1cd956385d4641f229ec430fd155e9da4e749c0941086d4e791c8a62ac463cf3b22e515c8638277baf3302f71abcc412ca01e83769ecad44c9b
SSDEEP

768:Ojm+nlxFFdORnYei4w9lNZsu0mZrkuv1368lJLdPh/mtQfEgDxlPtTgVI6PMCWbF:OjmelxFFdmnM7+Cz9JxdfEYrPhxCrnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bae1541a3677e929ba0ac89cddbf1c3

Files

4bae1541a3677e929ba0ac89cddbf1c3
.dll windows:4 windows x86 arch:x86

04ca92fd91d242dffdbc2dabd9f321bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBeep
GetMessageW
EmptyClipboard

kernel32

GetStdHandle
SetConsoleCtrlHandler
LoadLibraryW
HeapDestroy
GetExitCodeProcess
FatalAppExitW
WriteConsoleW
DebugBreak
EnumSystemLocalesW
ExitProcess
TlsSetValue

advapi32

RegQueryValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ