75507047e5a24edae825390a8b2f3135 | Triage

Sharing

General

Target

75507047e5a24edae825390a8b2f3135
Size

64KB
MD5

75507047e5a24edae825390a8b2f3135
SHA1

4f8e089f84e765a942818b65afa6ec410621f8a4
SHA256

41c2018ce20b89450e721490ead156e4a434254930c046eb10a4bbc45e0bd752
SHA512

1e665c7f51c4309f96b756e51a5f2f9cbabf07a58da765d00cb2e3b3de41f53d2d919aaf815a5d831cc04e807e095fe1c9be0cf4f8773d3a925c1608b1034ec1
SSDEEP

1536:3pHgXUao7fZ/EyVJgaFVBydpTUpPjadBB:5AXUaq5EyzgarByjwpPjadB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75507047e5a24edae825390a8b2f3135

Files

75507047e5a24edae825390a8b2f3135
.dll windows:4 windows x86 arch:x86

84f92bc5591fa27955658aa0b98dc2c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleOutputCP
GetDiskFreeSpaceExA
AddConsoleAliasA
GetConsoleCommandHistoryLengthW
PurgeComm
GetStringTypeExA
ConvertDefaultLocale
SetConsoleCtrlHandler
FreeLibrary
VirtualAlloc
GetConsoleOutputCP
GetFileAttributesExA
GetConsoleAliasExesW
FindFirstFileExA
GetModuleHandleA
SetVolumeLabelA
InterlockedDecrement
GetCommTimeouts
lstrlenA
IsValidLocale
PulseEvent
GetVersion
FindVolumeMountPointClose
GetWindowsDirectoryA
GetSystemTime
GetCommState
SetHandleInformation

gdi32

SetViewportOrgEx

shell32

SHGetSpecialFolderPathA

winmm

timeBeginPeriod
timeGetTime

Exports

Exports

Emoapmiaa
Awlecoebsve
Gfraaiub
BeginWmqqljby
AddLwoemirnyf
Hfdeylik
Poncstaubx
Gxbctotxf

Sections

.idata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 52KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ