7483a004b55bbd7d8af1ddcc41423ee2 | Triage

Sharing

General

Target

7483a004b55bbd7d8af1ddcc41423ee2
Size

16KB
MD5

7483a004b55bbd7d8af1ddcc41423ee2
SHA1

70c6026252ee3e83cae04b9404581eebee8585f3
SHA256

f6f1c998273ecee037e6771438701ab025b2e6c2f281b79d3461676832b543c5
SHA512

33f17c81c8d332ab987852e5e1a34cb7f7ba15c23fbf142f095ad7e0f090847fadec3725fa33465b20b6402452efd2bd802e8c0cef71113aa8a17c72944e9e13
SSDEEP

384:OGmUaW//YkaZuT+aDF8OuBBQARQkKNnbW:OGlwZo8BBQARQk2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7483a004b55bbd7d8af1ddcc41423ee2

Files

7483a004b55bbd7d8af1ddcc41423ee2
.dll windows:4 windows x86 arch:x86

6c47221602350c9cce0e438fb55e9c73

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

gethostname
closesocket

ntdll

memcmp
memcpy
strlen
strstr
RtlZeroMemory

kernel32

GlobalFree
CreateThread
lstrlenA
lstrcatA
VirtualProtectEx
lstrcmpA
OutputDebugStringA
lstrcpynA
lstrcpyA
lstrcmpiA
WaitForSingleObject
TerminateThread
Sleep
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
ReadFile
LoadLibraryA
IsBadReadPtr

user32

CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ