792ac1623daca2d6829086c3b4a055bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

792ac1623daca2d6829086c3b4a055bd
Size

17KB
MD5

792ac1623daca2d6829086c3b4a055bd
SHA1

3d2acd3a7056071e4089a683804577d2bcf85c0f
SHA256

7de0b9b86b8e462dd3e7af980e6c78a946e624d5dce785db2a63b9e5f9dd944a
SHA512

0565fb7fb3e88ebe88ac1efe0fe6d97df2cf5a5b8347fbcd320d69bc3b0984ae406293943b8277d52e802fbb1a421515def8ebe37e7f29ebbf2b3544e2679159
SSDEEP

384:ESKc4xIUfav0oWGvnmDmR7GhddkajmPbW9fWaD:EC4xIqmmlDMa7y6pzD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
792ac1623daca2d6829086c3b4a055bd

Files

792ac1623daca2d6829086c3b4a055bd
.dll windows:4 windows x86 arch:x86

6c88de642fffcdef7bf27436b4a11bdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetWindowsDirectoryA
CreateMutexA
CreateThread
ExitProcess
GetCurrentProcess
Sleep
DisableThreadLibraryCalls
GetProcAddress

user32

GetForegroundWindow
FindWindowExA
PostMessageA
wsprintfA
keybd_event
GetWindowTextA

msvcrt

fopen
printf
fscanf
fclose
??2@YAPAXI@Z

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
MSCON
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ