990d68cae55b2e3ed90223ac562db525 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

990d68cae55b2e3ed90223ac562db525
Size

99KB
MD5

990d68cae55b2e3ed90223ac562db525
SHA1

b46ca97294c48d7be38052dd77e7b491565a3299
SHA256

0ca89cf823bf13baae58aed366ef872bd5421322593962b1275d97a14902d4ad
SHA512

f8e554a4ecf147ad3900403fa08c37c7597b94239dd169ec7342f0fce853a2ffc7a1cd6c6749b5b4f54af677f22c365796b765534f0b2db216c92a72598a2451
SSDEEP

1536:9n8v7YJS1nsvJbbSGofB+kUCU++IVl+GbdiPAT3Xj3wAOp62WW11Bm93nb9x82mm:98DY41svt3ofX3/YPMT9kW+LW9Kc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990d68cae55b2e3ed90223ac562db525

Files

990d68cae55b2e3ed90223ac562db525
.dll windows:4 windows x86 arch:x86

ee2bf920917f70362b3e8f39d6bc150a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

BeginPaint
GetDesktopWindow

gdi32

GetPixel

Sections

.text
Size: 68KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ