56b9526addc1246700b69288b26c952f | Triage

Sharing

General

Target

56b9526addc1246700b69288b26c952f
Size

130KB
MD5

56b9526addc1246700b69288b26c952f
SHA1

9a3b66c7bf25a22f2eee053950b6f371fd6ea2d5
SHA256

cc6bb86138bb0e1814b6c383b0edca52d09065902c60b2df8a8871fd3af3bd67
SHA512

2e21a274afe331a1ac3ba124b45f9544b146a4655da1c0dbef28fbb24b4aa402f60c8c5515fd153492a73710a44cff797289e6015df61be4018695368b26ecf0
SSDEEP

3072:VG+Uw6OX6PJp/f1gJCIv1NsEuQo46Xfz+QILYLm9jN:/UwTqPXuJCkhqfR4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56b9526addc1246700b69288b26c952f

Files

56b9526addc1246700b69288b26c952f
.dll windows:4 windows x86 arch:x86

b8b4ffd3f2ac0701c466eae53c09b9f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard

kernel32

GetFileType
GetModuleHandleW
GetEnvironmentStringsW
FreeLibrary
ExitProcess
HeapCreate
TlsGetValue
LocalFree
GetTickCount

advapi32

RegQueryValueExW
RegEnumValueW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ