5217dc18fc6ec3212aec71a5cc605b79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5217dc18fc6ec3212aec71a5cc605b79
Size

87KB
MD5

5217dc18fc6ec3212aec71a5cc605b79
SHA1

0e05809aec51b100e1b3bb0542e2188a4dd99884
SHA256

cabe61aee7cdd50bad149a1a76a1b806c072e9557f5b248b76d7140ba25bc69f
SHA512

64d46b2cfc7164dd577179fbfa962a6d40f5c95ed92b72ea30767c1425d2864bd0cc760e78dbd632c232138e144401c4200c733876b9b6627155d968a318ea8a
SSDEEP

1536:qUB01qiIc7TEVLkx3si6I/GPQnTRIgz31ZtD8nlkD9k+q4bUtPvpf99hnGrA//kT:qUB01qhc7TEVYimGPOFrDGkD9rqWUtjg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5217dc18fc6ec3212aec71a5cc605b79

Files

5217dc18fc6ec3212aec71a5cc605b79
.dll windows:4 windows x86 arch:x86

799d800454393c30e0a9dc1d4a6b4472

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
ShowCursor
SetMenuInfo
LoadImageA
LoadAcceleratorsW
IsCharLowerA
GetDC
EqualRect
EndPaint
CreatePopupMenu
CreateDesktopA
ActivateKeyboardLayout

kernel32

RtlUnwind
lstrcatA
TlsSetValue
TlsFree
InitializeCriticalSection
GetPrivateProfileStringA
FreeResource
CompareStringA
lstrlenA
lstrcmpiA

oleaut32

OleLoadPicture
OleLoadPicturePath
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptor
SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
OleIconToCursor

Sections

.text
Size: 20KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ