96997883421cff48f7fe11aa64d5755b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96997883421cff48f7fe11aa64d5755b
Size

94KB
MD5

96997883421cff48f7fe11aa64d5755b
SHA1

626779a0a728d31488be916dcbf07fd85ed2511c
SHA256

c25469c60c9266c2e9a9946d11188f05eff8e672bbee12358a9212e6da9f0073
SHA512

8042d550465bba2b163c9221757103ee25299ec27da0bfbe3e124517ab60532ffa8eab816066cf06178f91f7a043a6a77c201e7af64390cd802ed4464ee5dfdf
SSDEEP

1536:x+e/7ONV7LIMg/w/CLS4rgObxLxz0I14zrnEdWFUR1RZLFJljXeEnEMumW4njt+:xzONZQ/LSp+xVz0I1mn9U/RZLzljXeE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96997883421cff48f7fe11aa64d5755b

Files

96997883421cff48f7fe11aa64d5755b
.dll windows:5 windows x86 arch:x86

39c3002e84450d368d9676a2f9e501cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

GetMessageA
SendNotifyMessageA

Exports

Exports

Aqxmatbla
Utuddvixaqt

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ