75e9ed37c8e47cbab210aa4f01fbce19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e9ed37c8e47cbab210aa4f01fbce19
Size

6KB
MD5

75e9ed37c8e47cbab210aa4f01fbce19
SHA1

675290a106a74fa2f1df41d18bbdfd84eaa04cfb
SHA256

61f6ed328d8fa4e7235eae7aea66c920600dac4640ea70d8277d6bc144ad582f
SHA512

28259c65e4cce8d0fff9ea07679e55bdd94e48bedd4b0ad4a480b14fe38b0f895117c5869e73307f01f58181463ae7e975eb03c84e6fc8a0f20d93d0f101f483
SSDEEP

96:kNQGlYdMTokt/T8718ZkwjQb5yIJIzdIxkORmZb/CYD4:yQCt/4W5jsvmpAkOmZWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e9ed37c8e47cbab210aa4f01fbce19

Files

75e9ed37c8e47cbab210aa4f01fbce19
.dll windows:4 windows x86 arch:x86

a99215a1b35034f5855ca7717a64bae1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

msvcrt

_strlwr
_adjust_fdiv
_initterm
srand
fopen
fgets
fclose
malloc
strstr
rand
sprintf
free
time

kernel32

FindResourceA
CreateThread
LockResource
LoadResource
Sleep
GetLastError
GetLocalTime
lstrcatA
CreateFileA
WriteFile
CloseHandle
WinExec
lstrcpyA
GetUserDefaultLCID
ExpandEnvironmentStringsA
GetModuleFileNameA

Exports

Exports

_GetMessageHookProc@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ