79eb14e7adcfe31add67b4bcabe75236 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79eb14e7adcfe31add67b4bcabe75236
Size

59KB
MD5

79eb14e7adcfe31add67b4bcabe75236
SHA1

3276d84e126a32ea8734b0ab519b79845b317b5a
SHA256

f019572961e6c9778238812478d309e76e38db8430b1e18d62de56c6a7a6fb8a
SHA512

6ee79a65be36daf869c6a82a18d4682891e8bfbc3da5ce8868d7aede532d02d500b33aeb5fcfe62808dc54e97f869018398d35dc4bff01f9f95f0d1252d9ad8b
SSDEEP

1536:O1Ghcvd2VX6Odwa51bz6lY6iPsEXEZSKU22Zfc/jtg:Ocevw6O9bOiNXEk22ZAtg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79eb14e7adcfe31add67b4bcabe75236

Files

79eb14e7adcfe31add67b4bcabe75236
.dll windows:4 windows x86 arch:x86

29f8bd90ef2fefe0b4054ad15fd875f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect

user32

CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ