716384656e301d025a517d6c01d6563a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

716384656e301d025a517d6c01d6563a
Size

95KB
MD5

716384656e301d025a517d6c01d6563a
SHA1

4fe75e8b65b7b4b776fcb8945e68c8c31cbe43e6
SHA256

cdad61208768097892812c6886bfb61f395f34b61d18a659eb536d87957618a7
SHA512

3b74964fdef1763de6eb207ad1b49dff5732e30bd740fd66e6e083ef9ab7e4b1602bc617205e230c7a1124d5c603c91f3d9cff4d402fd0032809404cc637a6e6
SSDEEP

1536:nFR5aoxDJTUs5G3lbqSrK0ZutAX3XNkvViTtNt+S3gDqd1Wx+A+cBcGnsroVyJU:FLaotys5GVb5ZutAX3X3T1v3gmd1Wxrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
716384656e301d025a517d6c01d6563a

Files

716384656e301d025a517d6c01d6563a
.dll windows:4 windows x86 arch:x86

6ff1543d6d95b6dfc2ab26330fa5ba84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
EmptyClipboard

kernel32

InitializeCriticalSectionAndSpinCount
TlsAlloc
TerminateProcess
LoadLibraryW
HeapSize
HeapFree
WaitForSingleObject
CloseHandle
DeleteCriticalSection
ExitProcess
TlsGetValue

advapi32

RegSetValueExW
RegQueryValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ