9a7bf6bfc357a9d6c43741ed5841ffee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a7bf6bfc357a9d6c43741ed5841ffee
Size

59KB
MD5

9a7bf6bfc357a9d6c43741ed5841ffee
SHA1

37dbc275b9cddae55a46ef6b07bc245ca44e4f77
SHA256

c741815a2c40e6132c0d19340273572d438a57c0de4deb332add95d6a699867a
SHA512

951157d78f85fef91040a60d2d3bd19d7d902d878f7608c905143357f726b24083a5524f5fff0a59ccd5ada5ebef6338d4c2e08eec4ca6a3d3caca33aa0e5d28
SSDEEP

1536:WxwPLbO2cYThlfjDCadERteX9YzW2tn8lj+tL:uwPLS23Thl6rM90W2WJ+x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a7bf6bfc357a9d6c43741ed5841ffee

Files

9a7bf6bfc357a9d6c43741ed5841ffee
.dll windows:4 windows x86 arch:x86

0b629dd8c996a09bf28f1d7be7dff29d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
SetFocus
GetWindowTextA
EnableScrollBar
EnableMenuItem
DrawStateA
CopyRect
CopyImage
CloseWindow

kernel32

InterlockedExchange
LoadLibraryW
IsValidCodePage
InterlockedIncrement
GetStdHandle
GetLocaleInfoW
ExitProcess
TerminateProcess
SetStdHandle
CloseHandle
SetFilePointer

advapi32

RegOpenKeyExA
RegEnumValueA
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ