962cb8d8c3bb9a953d602ee36c78eab9 | Triage

Sharing

General

Target

962cb8d8c3bb9a953d602ee36c78eab9
Size

104KB
MD5

962cb8d8c3bb9a953d602ee36c78eab9
SHA1

367fab1ca123f4293d07e851838f77eb62e6ad3a
SHA256

e4961349e1a2ebaa02e8bfeaefaec42172e616403c244cc86b3c174b30f56b77
SHA512

ea9353e2d07d0a9fab0805c650fd575e5048c7fcffd65dc009169fdbe275ab035cea8935593a7069d49b33024680d32f3b3a032340968193fe2d9621b034f72c
SSDEEP

3072:paBdaMKcfxQ4pTjkTRxI8NLJRgdkWGqzjTA:KdXfxhTIrI8N181Gqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
962cb8d8c3bb9a953d602ee36c78eab9

Files

962cb8d8c3bb9a953d602ee36c78eab9
.dll windows:4 windows x86 arch:x86

f1015a99bc20a3562729eb637c0602ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject

Exports

Exports

vyaokku

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ