74a9acfb907449ed499dc6d82b090fad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74a9acfb907449ed499dc6d82b090fad
Size

69KB
MD5

74a9acfb907449ed499dc6d82b090fad
SHA1

07317aca5a0cee29609033fa638cd6571f32e0a5
SHA256

3fb8499e1a4cf106e930f18e26b26f76876b88f2cd815fc2ae3f9fd4dcd06eea
SHA512

4a7953593cfb520686480d8b865a3af6cd19d0df220f9e32b4ead5efd75c94ef18391b0ca986bdf978cca8422e2fb9dd96c1b667548714aab91de30065caded9
SSDEEP

1536:HeW/wRVcGD8V/E8FBZZtldrCTaBPEZom5QpUeFnTFMKPgUFhZZ:HeO2VcdV/EWbnlEKcZv5QJFpMZUFhL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a9acfb907449ed499dc6d82b090fad

Files

74a9acfb907449ed499dc6d82b090fad
.dll windows:4 windows x86 arch:x86

d70f84b5f8ca433c79befbc5f544a3f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileA
CreateFileA
FindFirstFileA
FindResourceA
FreeEnvironmentStringsW
FreeLibrary
GetCurrentThreadId
GetFileAttributesA
GetFileTime
GetFullPathNameA
GlobalAlloc
HeapAlloc
HeapCreate
InterlockedIncrement
MapViewOfFile
SetHandleCount
Sleep
lstrcpyA

user32

CallNextHookEx
CharUpperA
ClientToScreen
DispatchMessageA
EmptyClipboard
EnableWindow
GetKeyState
GetSubMenu
OffsetRect
OpenClipboard
SendMessageA
SetActiveWindow
SetDlgItemTextA
SetPropA
SetWindowLongA
SetWindowTextA
UnhookWindowsHookEx

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ