6412b1d77a6b4ff0ff70539996c28271 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6412b1d77a6b4ff0ff70539996c28271
Size

147KB
MD5

6412b1d77a6b4ff0ff70539996c28271
SHA1

81285db5fbd7ad5d146540989e50462f5b180fb8
SHA256

eb076647f65107159f56dbfce7c8c8957d1b783b8487bbe99cc731917338bf79
SHA512

8f7ea7e47bb15be211a7dc6759cc1c30e6c30e6eae47568285b6e9bdb426063c1689d6798597900256fb1c1fd7291a31be551c770b19c50802f459a086da1def
SSDEEP

3072:m4BO7fJVCV+jpJCr/icRWCJtG4SL9ah+1yTH9AgVO/h/f+UD:m7hJm1bG/LyQynO/Nf+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6412b1d77a6b4ff0ff70539996c28271

Files

6412b1d77a6b4ff0ff70539996c28271
.dll windows:4 windows x86 arch:x86

4bc31567504b384fb09d06399500d86c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
FatalAppExitA
FindResourceA
GetACP
GetCommandLineA
GetFileType
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrA
IsValidCodePage
MultiByteToWideChar
RtlUnwind
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep

msvcrt

__p__commode
__set_app_type
exit
isdigit
wcscpy
__getmainargs

user32

IsZoomed
PostQuitMessage
RemoveMenu
SetMenuItemInfoA
SetTimer
TranslateAcceleratorA
UnionRect
EnableMenuItem
CreateIconIndirect
MsgWaitForMultipleObjects

ole32

CoGetMalloc
CoCreateInstance

Exports

Exports

ExtTextOutComplex

Sections

.text
Size: 95KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ