718402005cc4e944fd520a941a325c9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

718402005cc4e944fd520a941a325c9f
Size

41KB
MD5

718402005cc4e944fd520a941a325c9f
SHA1

a219694a9e8aa174ca364415e3bc7ea6f6b3dec0
SHA256

5949637a7ca21a4330e1bfb3c85ae6dc3dcdf5131d813bb77beb35aaa18102ea
SHA512

7c913050c7e735648d98ef82741d7a8c86f12a13ee4f61c579630e13997a8c650214f91357cde465dc6fcdc83ae20cead98749fbccf8a317d7a04d046def3924
SSDEEP

768:9839lIGUjRHgXiCZqIksNLCqEtjRH9ADSGiuXRhWemyzMzESqYAVH7:983sxjZ3CXxNKLCRbaWXZVH7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
718402005cc4e944fd520a941a325c9f

Files

718402005cc4e944fd520a941a325c9f
.dll windows:4 windows x86 arch:x86

b844715a000023a67e7ef45859bb2149

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
FreeLibrary
GetEnvironmentStringsA
GetFileType
GetSystemDirectoryA
GetSystemTimeAsFileTime
HeapAlloc
HeapCreate
OpenProcess
SetEnvironmentVariableA
lstrcmpA
lstrcpynA
lstrlenA

msvcrt

__p__fmode
wcslen
malloc

user32

GetSystemMetrics
PtInRect
SetCapture
GetUserObjectSecurity
PostMessageA
GetWindowThreadProcessId

oleaut32

RegisterTypeLi
OleTranslateColor
OleLoadPicturePath
GetErrorInfo
SafeArrayDestroy
SysFreeString

shlwapi

PathBuildRootA
PathFileExistsA
SHDeleteEmptyKeyA
SHSetValueA
StrStrA
StrToIntA
PathAppendA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ