637da53055dede6c2954295963e516c3 | Triage

Sharing

General

Target

637da53055dede6c2954295963e516c3
Size

135KB
MD5

637da53055dede6c2954295963e516c3
SHA1

db0dd5178bb901212d9194161e053a3cf0fb1921
SHA256

a346299bcda58fc5e11c52554390e75e05d7514e504659d00f5371cdfb24db87
SHA512

23625b406d9f7cf5f454f3fd234ace11e02baf2f128f8d3629daf5b028a972dc2cccdbf0b277805e7db83174548753c40bc0ed742eeda2c9ed086526e30fc669
SSDEEP

3072:/qVZmM0yB59ZGmKC6pgOIhJYGkkE94mVaYMMNO2RTh+8wx:YcBE59qCfOIhJYGm9hnp5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
637da53055dede6c2954295963e516c3

Files

637da53055dede6c2954295963e516c3
.dll windows:5 windows x86 arch:x86

58d3ebe9d1a527a50a9804fc408518b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetWindowsDirectoryA
VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress

advapi32

RegOpenKeyExA

ole32

StgOpenStorageEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text2
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ