538f3a64040b82089ba0a44853b2bbd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

538f3a64040b82089ba0a44853b2bbd5
Size

15KB
MD5

538f3a64040b82089ba0a44853b2bbd5
SHA1

c978d97e2ebbc69187a22cc89713dc02c32f3b60
SHA256

22331754766be12f743529fd5acfdade36ed37b32e7bf549653b6de55d7521ee
SHA512

1d6c691bbd088c53fa025b1c926a82feb227ac6fff8a1699c2990fe98ac2566d5f280a48da44728ae236439e7b97aa5a44c0f4182ed4b1e641344249c8dd938e
SSDEEP

384:UmDLFRavG7eaSAPT3uolYPexR+IZ1ngs:UGovVaS06GYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
538f3a64040b82089ba0a44853b2bbd5

Files

538f3a64040b82089ba0a44853b2bbd5
.dll windows:4 windows x86 arch:x86

218a5ee4f29b12e4cd6ad494ba08c1ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ