5929b633efc6ee4c3e4335e1c059c6ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5929b633efc6ee4c3e4335e1c059c6ac
Size

153KB
MD5

5929b633efc6ee4c3e4335e1c059c6ac
SHA1

b3fbcf1f005db5cf6727a218e1c6699bd896cb54
SHA256

b55a02e91574f5a5440bbf5e3b9ca9684bbdfd47ffc58ae55cebef50cb382484
SHA512

6cc7750a3b920abe016b17433ec117617f009d82e590047da2e8fe0f8575158fda4616cd431bb64bf04f50feafa0b08e499d12a962495f1120a3aa7b9f9a0fee
SSDEEP

3072:JcPoZMd0fmLVIbthxZFYV0SzG8U1T0/FDTtCfIZqb+WpqqE3a:JNZMd0fOS3CV0T8U2fwtb76

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5929b633efc6ee4c3e4335e1c059c6ac

Files

5929b633efc6ee4c3e4335e1c059c6ac
.dll windows:4 windows x86 arch:x86

1c2660b937ee27f8117e5b35aa73d8c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetAsyncKeyState

vstdlib

Q_strcasecmp

tier0

Msg

Sections

.text
Size: 148KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE