79fd9c3417e4e6d6bf568c4ad410fa7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79fd9c3417e4e6d6bf568c4ad410fa7f
Size

1.2MB
MD5

79fd9c3417e4e6d6bf568c4ad410fa7f
SHA1

905a59916327478d3fa4439dc11aead2bc3ca90f
SHA256

91785e4cc281520349cec8b14c4ea25313bbd757de83c98f24f5857369c43988
SHA512

2b1547b5b5df2b052cea5a89524ec6328b561c4fb76613461163dea9790d3b63ebc1fa11b6d28ec7d020f3222b31989d661b5eef999e5d7972e2c8dc4d870026
SSDEEP

24576:zO/kVcMc1oaOHBVhb678ZK6OcLp7PB4W8JmMrxBXehpn:zO/j1o7BrO8ZfLFp4WCmYxBXehp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79fd9c3417e4e6d6bf568c4ad410fa7f

Files

79fd9c3417e4e6d6bf568c4ad410fa7f
.dll windows:4 windows x86 arch:x86

ad02a65102adf5e712bbf46f6299f678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

winmm

sndPlaySoundA

Exports

Exports

DllRegisterServe
DllUnregisterServe

Sections

CODE
Size: 1.1MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE