895435b2279efa62b827ce14eab7a13c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

895435b2279efa62b827ce14eab7a13c
Size

95KB
MD5

895435b2279efa62b827ce14eab7a13c
SHA1

9062395cf21228be061f397b53bc01b3d7bd45f7
SHA256

5b61628fb66fbfa0d3f0a6c6c500b8c2f4b996d8a64b36fe85be9bf6356096a5
SHA512

1893a967f669167ff6b780fea094733e6c237b937a599a0bd2a5ddf8ed8b160e7117fc9ca58c86c1b3bd31e2b60ffc00b30a4348963a50e352473d8f928d3401
SSDEEP

1536:8bnwehTiprSeAgdsgBUTRRF1gx35C5+GnqXmMzGtICrcSuaW86OU3jMkiVT1:unwehGprryKUz7KCUAqXmMz+xrcSuaoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
895435b2279efa62b827ce14eab7a13c

Files

895435b2279efa62b827ce14eab7a13c
.dll windows:4 windows x86 arch:x86

8fa1e4e7b4d8b75de317396e6cbabfaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyMenu
DestroyIcon
DestroyCaret
DeleteMenu
DefDlgProcA
CreateMDIWindowA
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateCursor
CharUpperBuffA
CharUpperA
CharToOemBuffA
ChangeMenuA
ActivateKeyboardLayout

kernel32

EnumResourceTypesA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
UnmapViewOfFile
TlsAlloc
Sleep
SetLastError
SetEndOfFile
SetCurrentDirectoryA
ReadFile
OpenFileMappingA
LoadResource
GetCommandLineA
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
FindResourceA
FlushFileBuffers
FreeResource

Sections

.text
Size: 22KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ