67b02f3388143d6975ed6681f51c168e | Triage

Sharing

General

Target

67b02f3388143d6975ed6681f51c168e
Size

92KB
MD5

67b02f3388143d6975ed6681f51c168e
SHA1

04e47bfefca4c2eb6d97dd8fddd9b2ebcdd227f8
SHA256

0c6729f8ce0ab6b242ed43e914ec163d4dd4f2cfb60ebacf4643d47d679cd293
SHA512

60fd57dc4b959955521726ac2679edecc594edc6dc36051d10235a8300a9438f0124f5a917e00626a60ef985ea6240d7e60f46ad8d35b4c2e94671b216702982
SSDEEP

1536:b85Tm8UL7GAzcoWvZUMnbUUPHFv8Ge/op0imYwepfyQFq1i/kGs:b85FUL7GQQvZfbUUPF2ITFWiZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b02f3388143d6975ed6681f51c168e

Files

67b02f3388143d6975ed6681f51c168e
.dll windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 35KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE