72cfda876efc1c2b5a412f0818dca2dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72cfda876efc1c2b5a412f0818dca2dc
Size

64KB
MD5

72cfda876efc1c2b5a412f0818dca2dc
SHA1

f41a273372c06aad862f16ee50b959c0fc9049e8
SHA256

dd4c5607c826ee42e2d3b7702dcfadd918b675f6d6b4e646c352a01895d86879
SHA512

8424f218d2ee54484b7be386bb5bf68412f176dd6e602b31e0a09d0b27a6a905631e36ad990d379835577bb6c8b6e23895aef1f654555a8050ee9856d4ba3f94
SSDEEP

1536:lgylrm6lzrMR9THJ1gAS+zdQR7+Pbbyn039:lk6RAR1UA/zdQRrnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72cfda876efc1c2b5a412f0818dca2dc

Files

72cfda876efc1c2b5a412f0818dca2dc
.dll windows:4 windows x86 arch:x86

33a3d289846428c3c942777a06b10493

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalHandle
GetSystemTimes
GetModuleFileNameA
SetLocaleInfoA
ClearCommError
ReadConsoleA
GlobalGetAtomNameA
GetLogicalDriveStringsA
CloseConsoleHandle
GetCommandLineW
GetCommandLineA
GetDevicePowerState
ReadConsoleA
lstrlenA
ReleaseSemaphore
WriteConsoleOutputAttribute
GetSystemWindowsDirectoryA
SetVolumeLabelA
ExitProcess
ExitProcess
OpenJobObjectA
FindNextFileA
VirtualAlloc
GetConsoleWindow
GetProfileIntA
OpenEventA
RaiseException

wininet

HttpOpenRequestA
InternetOpenA
HttpSendRequestA
DeleteUrlCacheEntryW
HttpQueryInfoA
InternetConnectA
InternetOpenUrlA

Exports

Exports

Pxglieiog
Xvncnrnjkg

Sections

.rtext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 52KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ