68424a517dab9d9eff186c726cf71124 | Triage

Sharing

General

Target

68424a517dab9d9eff186c726cf71124
Size

44KB
MD5

68424a517dab9d9eff186c726cf71124
SHA1

cb4e0de92778b43c5307003cdb1dd4b77de88ff5
SHA256

79ae53450d9639cf844426698e5b6d6fdf5e697bbba4733522bb11f3fc8437b1
SHA512

fbb0a8a05b4f6f866cc56bdd4989db836f4cc39d31736547cf672b161b82fac6b83320947b08a4c847392cf90d416ac3767f0b43428d1f70b30a7838cb3bbed8
SSDEEP

768:yRNe1Y7XLrAW8KliKGoYT4U8GMOeTr9FTwK1UNd6/kd4Z69H8LK:yi1YbLrF8Kc9pT4U8GVqD5yNQkmZ+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68424a517dab9d9eff186c726cf71124

Files

68424a517dab9d9eff186c726cf71124
.dll windows:4 windows x86 arch:x86

fd0279b9cdcb1bb98f1a768ac2a99457

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHRegDuplicateHKey

kernel32

ConvertDefaultLocale
Beep
HeapAlloc
GetProcessHeap
HeapFree

user32

SetWinEventHook
GetMessageW
PostMessageW
IsDialogMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UnhookWinEvent
GetParent
EndDialog
GetDlgItemTextW
wsprintfW
SetDlgItemTextW
SetFocus
GetDlgItem
GetWindowLongW
SetWindowLongW

winmm

mmioInstallIOProcA

Exports

Exports

kfltco

Sections

.code
Size: 41KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 1B

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ