989911814d20f59526faff4fa9565fbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

989911814d20f59526faff4fa9565fbb
Size

15KB
MD5

989911814d20f59526faff4fa9565fbb
SHA1

9e3e24471f590a56bad0692a6f1137c3dd1b8745
SHA256

8e19127d6ace94f1a74ec98e6767b8029f6a75d55f9ad67e7b02013ec09d5377
SHA512

2624ed472e78d851bfec5deb075dab23603a336d1069068ed5e2ec493fc8eff3a8be9c09ac612685191f587dd31d4e9c8bfb366241dc5a52d8882c1876eb1d18
SSDEEP

192:warHyy0BV8xSdorqrGv0jloBcfDi4/m5j/uISVGFVaP/ROH75hylgMSK:wm0sQrGvglBKodoaxMh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989911814d20f59526faff4fa9565fbb

Files

989911814d20f59526faff4fa9565fbb
.dll windows:4 windows x86 arch:x86

43eecaea1f626a218627a9cba0315a3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ