64085bdea5c8065e4344bb0746942c84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64085bdea5c8065e4344bb0746942c84
Size

169KB
MD5

64085bdea5c8065e4344bb0746942c84
SHA1

5d0bebfddc11504cf5bc883ab0239e6cb417d8a0
SHA256

dc429ee821d9561e16b8012a93626309101ffd449eb85aad83af744cab66365d
SHA512

b59295abc88447fe6783a062470df88c67c772ae15bcc6efa236ad25a5d2ead6c0986a8219b90e82cb00caa475dc2110e3dfbee8fff380351838c8415178c826
SSDEEP

3072:KpoEzBPEb+k3OycKHCx8qAIi7p61jY2aV1DFGAJ7W8VeUh:HEzBsb+sBCvAIC81Hy8Ag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64085bdea5c8065e4344bb0746942c84

Files

64085bdea5c8065e4344bb0746942c84
.dll windows:4 windows x86 arch:x86

5acafc82443bd14950cbf31e3d66a4ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAllocEx
LoadLibraryA
GetProcessHeap
LoadLibraryExA
RaiseException
VirtualAlloc
ExitProcess

gdi32

GetBkColor
SaveDC
CreatePenIndirect
GetBkMode

user32

TranslateMessage
UnhookWindowsHookEx
IsMenu
UnregisterClassA
GetMenu
CharLowerA
WaitMessage

comdlg32

FindTextA
GetSaveFileNameA
ChooseColorA

Exports

Exports

_jhY6e2
WoyxpMfWUsqjL
_Amy5Cmu7CZfR1K@4
_NwuBK9wgmte@8
9wrFWUKDg
_qO_Y4dfzz6Ccj2
_WIj8jLm_wlxovJ@20
_2IemZGq8wuQ@20
_CzAvM8IdKUHkxA@12
A_kLE1tCY4yN6
_htVnEXZpyZwsp
Jdq7pX3bUJ
hzy1jEP@24
6AuFipDYIKA@12
_Bwn2BjGDGR
_KE3GQXlLGa
GiWy0hxbO
_N4qDKOg

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ