99aebe0bec5c6f22f513cb4b354c08ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99aebe0bec5c6f22f513cb4b354c08ef
Size

81KB
MD5

99aebe0bec5c6f22f513cb4b354c08ef
SHA1

ba9381201962cc5f9eeeeb066558480ba9785eb9
SHA256

f7f10e36a68b1ac3cf889c4cb6b1112715e8305d39c055da04cc2fd4884b87b6
SHA512

ad022c2d8438b1be10a393e79382b1cde0cfdf3190f7efd7908e316da5098728bcdc8c8fa61f674f0322d5bb45974f2f4194e2af0479497a23db4780b461edd9
SSDEEP

1536:FzkAQH9RiMccbqR9uFFDZNAf6dNlgT9cNHYNfo+YHDLWN9oPjVdMogxG:Fi9R/qyFFDpN8cNHYJoTH/WNI/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99aebe0bec5c6f22f513cb4b354c08ef

Files

99aebe0bec5c6f22f513cb4b354c08ef
.dll windows:4 windows x86 arch:x86

94f1a58b54ff933e73d09b5439db2f7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetAsyncKeyState

gdi32

DeleteObject

advapi32

RegCloseKey

Sections

.text
Size: 65KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE