565a199f4809e5b1193bfad0d3660781 | Triage

Sharing

General

Target

565a199f4809e5b1193bfad0d3660781
Size

38KB
MD5

565a199f4809e5b1193bfad0d3660781
SHA1

b258f034de37cfbaabd50150e54c6016b9b351eb
SHA256

49399371780876b1e8bd650c8a42ec836ec6536c0c9bd84e2e8a9ad6e646dc9f
SHA512

e9ab3e9041c22bbefb2237d89b25ebb538c168330cd37783898ddb8ebc5b609581ea5d42bcb14aa34497e8cd5938cdd99fb77c734513e394ceea8f70faf1e903
SSDEEP

768:gHWUarwaQFFEjX4u0hXt+jpDYZdrdDo8CwUDh:JMPGj0hSEZdx9Czh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
565a199f4809e5b1193bfad0d3660781

Files

565a199f4809e5b1193bfad0d3660781
.dll windows:4 windows x86 arch:x86

37dbf270bfc619f4b7a89f6c0900c7d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EmptyClipboard
EndMenu
EndPaint
FillRect
GetFocus
LoadCursorA
DeleteMenu
MessageBoxIndirectA
OffsetRect
SetCursor
SetMenuInfo
ShowCaret
CharUpperBuffA
CharLowerA
ChangeMenuA
LoadImageA
wsprintfA

kernel32

OpenFileMappingA
FlushFileBuffers
EnumResourceTypesA
lstrcmpA

Sections

.text
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE