75840610a32ac7bc472a8ce3c86f2e69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75840610a32ac7bc472a8ce3c86f2e69
Size

24KB
MD5

75840610a32ac7bc472a8ce3c86f2e69
SHA1

40b6bf65f2365f576e4f449e1e5b71dd18aee4d0
SHA256

03cf768c4c5d57bdccd37ea6213932a95ef54370b099c823467e321bb34fcbb0
SHA512

2e2b6914e25ce8a6c43572095ec3147bf434557afcfb61476486cb2705c637198f725a3467d3d736eca943404984014400457dcc5b9693902f775af0c8f2f898
SSDEEP

192:fzQu4KfneS1cjkzzITxn6Jkt9lQARi+1tvCpct5Ubg:fku4EneS1ckzwxnoagARi+1tvCpct5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75840610a32ac7bc472a8ce3c86f2e69

Files

75840610a32ac7bc472a8ce3c86f2e69
.dll windows:4 windows x86 arch:x86

a209ec57d42a9b45fe11dc296daa9563

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
EnumWindows

msvcrt

_initterm
free
_adjust_fdiv
_strlwr
strchr
atoi
memcpy
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
fopen
fwrite
fclose
fread
time
memset
_itoa
malloc

kernel32

Sleep
CreateThread
ExitProcess
lstrcmpA
lstrlenA
LoadLibraryA
CopyFileA
GetProcAddress
GetModuleFileNameA
GetTempPathA
lstrcpyA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ