59bf9c96b7e7e725887354f0d70c91ff | Triage

Sharing

General

Target

59bf9c96b7e7e725887354f0d70c91ff
Size

282KB
MD5

59bf9c96b7e7e725887354f0d70c91ff
SHA1

974a5d6869c46bdc09146d6c76ab401caf754d85
SHA256

b4b616b6cfe93cc2c76deb43f9f37166dcc76006b60cb1aa7a3c76c5dc008764
SHA512

90750401fa16cef2faa78b0d566353f99e3f1f1427ced689f477419d4f06ae52758f76e5bddd537c23901f496fc0d65488d03445c6ec88f985828d781a6cb9cc
SSDEEP

6144:8zWM7n4Qz9MeKLC+tJArnar2wER7awKe6GprbvDFXhWJNMmIlzeNWE:4rn4yuu++wER7geDrHF0NfIlzekE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59bf9c96b7e7e725887354f0d70c91ff

Files

59bf9c96b7e7e725887354f0d70c91ff
.dll windows:4 windows x86 arch:x86

8d769b39cbfc844321ba9c5e9483fbd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
Heap32First
VirtualProtect
WriteFile
VirtualFree
Sleep
VirtualAlloc
CreateFileA

user32

SendMessageA
GetMessagePos
GetInputState

wininet

InternetCloseHandle

ole32

CoUninitialize

advapi32

RegQueryValueA
RegQueryValueExA
RegEnumValueA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE