520c05134638209cb444cb8e84c44777 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520c05134638209cb444cb8e84c44777
Size

32KB
MD5

520c05134638209cb444cb8e84c44777
SHA1

df447a35d9adab1af43f86b6e150fcb499b69079
SHA256

ee4fdf8cb512b992e760d68d7fb0cc65c422b436d311e508987127b0ad765e16
SHA512

93cc396a9460b4fc44c3cdc473bb48cf8623ed3c4dcbc6681880d010f5dd0240cc31cd6c05d878762cbc3f6f333b7466300d00f683cec621d31e0ca562cad866
SSDEEP

384:+P6m3bOW+eJ4dzq+27/LgmwOvXt2H7yMLeN2X:+imiJbdzqxrwOPeyNN2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520c05134638209cb444cb8e84c44777

Files

520c05134638209cb444cb8e84c44777
.dll windows:4 windows x86 arch:x86

c3802308dcfaa38914c6be85b7b06292

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BuildCommDCBAndTimeoutsA
CreateFileA
CreateMailslotW
ExitProcess
GetProfileSectionA
LoadLibraryExA
SetFilePointer
SetupComm
WritePrivateProfileStructA

advapi32

BuildExplicitAccessWithNameW
CryptVerifySignatureA
GetMultipleTrusteeOperationW
LockServiceDatabase
ObjectOpenAuditAlarmW
ObjectPrivilegeAuditAlarmA
RegCreateKeyExA
RegEnumKeyExW
RegSetValueExA
RegisterEventSourceA
ReportEventA
SetSecurityDescriptorDacl
SetServiceBits

user32

BroadcastSystemMessageA
ChangeClipboardChain
ChangeDisplaySettingsExA
GetComboBoxInfo
GetMenuItemID
MapVirtualKeyW
RegisterClassExW
UnregisterClassA

Exports

Exports

Update

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE