65f3c5e6a908f8e009ecad8a3e4e8bc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65f3c5e6a908f8e009ecad8a3e4e8bc1
Size

61KB
MD5

65f3c5e6a908f8e009ecad8a3e4e8bc1
SHA1

528e5226650bcc74500e80ce33d8f6dd6b8c31a4
SHA256

9537ddc3b2e27d723d1a0375ef05da9d1f8933ea1311b1f3f13beb3c86fff379
SHA512

7273e1d5ee120f60accdacd709f1cd2acc90f43458170029385a02c460b8e8061659ea3ada38ec3f169a00e2dad349e8781d025f6e8dc91bf0176a653abe344a
SSDEEP

1536:ialUHjCup3vWd3IonOMcHPIK+8C2UslnKl3eNRZrq:ialCWa86+8C2LK3UZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65f3c5e6a908f8e009ecad8a3e4e8bc1

Files

65f3c5e6a908f8e009ecad8a3e4e8bc1
.dll windows:4 windows x86 arch:x86

671aa2a053dab07cb6e1182c16a9216a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowScrollBar
CreateDesktopW

kernel32

TlsGetValue
TlsFree
ExitProcess
HeapFree
LeaveCriticalSection

advapi32

RegQueryValueExA
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ