64a0e34a64a2aefd00bf9fd6acb37f66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a0e34a64a2aefd00bf9fd6acb37f66
Size

129KB
MD5

64a0e34a64a2aefd00bf9fd6acb37f66
SHA1

45a756ae048f45a6f708248648d6ef5a1909d6ee
SHA256

c64444d08635d13ac2d6e157f6a5e3683f889c792333ce9a5bf72ffd6fbab0d4
SHA512

15cbb53ff8e336b999e3543185ea5cb776742d3cf8d69fbbf08d3b277f4ec84ceefb17a9acc9a1f8364b503ab986f9b53059fb8a829e7180f9bb69020b85dd74
SSDEEP

3072:+JKrmAJ3OCAUlvAnafSoS4ur9K+HRxfdbDYes:6AJ+KvAnwGx9fHfdbDYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a0e34a64a2aefd00bf9fd6acb37f66

Files

64a0e34a64a2aefd00bf9fd6acb37f66
.dll windows:4 windows x86 arch:x86

3737e55029be44d76ada9789d7dfb55f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GetLocaleInfoA
GetSystemInfo
GetVersion
HeapAlloc
HeapCreate
HeapFree
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
SetErrorMode
lstrcmpiA
lstrcpynA

msvcrt

strpbrk
__p__fmode
_stricmp
exit
fprintf
free
time
swscanf
wcslen
isdigit
fwprintf

user32

GetWindowLongA
RegisterWindowMessageA
SetCapture
SetUserObjectSecurity
GetKeyState

oleaut32

SafeArrayAccessData
OleLoadPicturePath
SafeArrayDestroy
SysReAllocString
SysStringLen
VarBstrCat

shlwapi

PathAppendA
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteValueA
SHOpenRegStreamA
StrSpnA
StrToIntA
StrStrA

Sections

.text
Size: 64KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ