87f6edb8922ba1619c134b79455c16d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87f6edb8922ba1619c134b79455c16d2
Size

39KB
MD5

87f6edb8922ba1619c134b79455c16d2
SHA1

d28cdb050b30fc388edd9c32e1b9b5aa0a3eff16
SHA256

4ee82cbcdf39f0ff5b3f635957b38d6de4ffbe0d42cee03dedb34773b5358a20
SHA512

232eb89e85d631acf7b8f9d743e0e3b0e2092e7246fac8bc766e7e8cc9a989a2643effa89c0e8b913e1a067e34f2ba561361df2ab91c43ca66813c301ef08c1e
SSDEEP

768:qPO2L/rfwHI5FJtIbNa27KLyDzA8q+bvRsr/Ut0qDBlCezRQT25A:qPlL/Uo5FMbE6+Uq+b2rMlDBlriKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87f6edb8922ba1619c134b79455c16d2

Files

87f6edb8922ba1619c134b79455c16d2
.dll windows:4 windows x86 arch:x86

40e3e8ef5497dfa1f71cf8079b526e82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

OpenDriver
DrvGetModuleHandle
timeBeginPeriod
CloseDriver
timeEndPeriod

shlwapi

PathIsRootA
SHDeleteKeyA
SHDeleteKeyW
SHEnumKeyExA
SHCopyKeyA
SHDeleteEmptyKeyW

user32

ReleaseDC

advapi32

RegLoadKeyA

kernel32

HeapFree
GetProcessHeap
HeapAlloc
GetSystemTime
lstrcmpW
GetFileAttributesA
GetSystemDirectoryW
GetCurrentDirectoryA
GetWindowsDirectoryA
GetDriveTypeW
SetCurrentDirectoryA
lstrlenA
GetComputerNameW
IsValidLocale
Beep
CloseHandle
CreateNamedPipeA
DeleteAtom
DeleteFileA
GetConsoleCP
GetModuleHandleA
GetNamedPipeInfo
GetProcessVersion
GetStdHandle
GetCurrentThreadId
GlobalAlloc
lstrcmpA
SetFilePointer
LocalFree
GetCommandLineW
GetComputerNameA
CallNamedPipeA
BackupRead

msvcrt

rand
toupper

shell32

CommandLineToArgvW

ole32

OleRun

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ