803eea990c93f4808880f7a95cf5c126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

803eea990c93f4808880f7a95cf5c126
Size

38KB
MD5

803eea990c93f4808880f7a95cf5c126
SHA1

16b38b3ec66d985de882185379b02af5057a53d0
SHA256

75ca7f415013ccfece1a29cf93553cb1ce6e09e653b2871a37576e0373bfcbab
SHA512

d3a4288ef3faa483d38573849ec945a71627da2a717592f46c907cada7f801b778cf66286548b75b13dd6740d46566ac018d5343e5cdc4ced10a5d4b4e435e5d
SSDEEP

768:SEf1EV7JkAVM2X2lXVan7afT1BUweLVqg0hGCjrc664Y3DmJ:Xf1E8CMjlm2ZsVqg0oC00J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
803eea990c93f4808880f7a95cf5c126

Files

803eea990c93f4808880f7a95cf5c126
.dll windows:4 windows x86 arch:x86

5e696bc437a05b58cb03509779c7dcba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharW
OemToCharBuffA
ToAscii
IsCharUpperA
GetMenu
EndPaint
DrawTextA
DispatchMessageA
DestroyIcon
CreateMenu
CreateIconFromResourceEx
CreateDialogIndirectParamA
SetMenuInfo
CharToOemBuffA

kernel32

WriteFile
TlsAlloc
OpenFileMappingA
GetTimeFormatA
GetSystemTime
GetModuleHandleA
GetLocalTime
GetLastError
EnumResourceLanguagesW
lstrcmpiA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE