5214f366124e89380bcdad434e0a2bd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5214f366124e89380bcdad434e0a2bd9
Size

17KB
MD5

5214f366124e89380bcdad434e0a2bd9
SHA1

102fdce93b53c12ecd17dab3f659fdfb300344f6
SHA256

52de12f0dd0334ee0a75aa9abb712b7405119f62ec90a0394b997092004d26dd
SHA512

4c3cf27d0aa16959c5240b51d9d9ab45b9176524b33ff4c74e381cd5ba121c56219f34958e61dea7efc07ad12088fad74e5519c259e0ccb40b24dd55711fed84
SSDEEP

384:OiNl0FvUSKDeR78tljFbE4U9tvORQ3btcM8qd:Oin0FvXKDe5wjFbEzvORQ3R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5214f366124e89380bcdad434e0a2bd9

Files

5214f366124e89380bcdad434e0a2bd9
.dll windows:4 windows x86 arch:x86

17c57e61c92a2963262fc8943c0de9c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shlwapi

StrToIntA

user32

PostQuitMessage

advapi32

AdjustTokenPrivileges

shell32

Shell_NotifyIconA

Sections

.text
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE