a32b4527b8e445ac050016bf95c64887 | Triage

Sharing

General

Target

a32b4527b8e445ac050016bf95c64887
Size

146KB
MD5

a32b4527b8e445ac050016bf95c64887
SHA1

a1a3964ac772688d73f6418200c65fe96e214060
SHA256

e852ae501da981629bbd4530f1b7b2d79921818d41f315c47fe9f364e22b3460
SHA512

06a8d8bf180d7a008caee5343922bbc06a35d2355a4d70806c7c6fd73887ffcbb389793be96c4880bec11dc26f9e9a2d87e45c8a580e3a76c15c53d02f04cb08
SSDEEP

3072:V+r/i4aaVkBrR6RRe3UCROhYYbmNEVH1jwnpaXksEKKNfzmKICBjRiEvxF:ViikE6XCREPiStJeJF3NbmKIC5Riqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a32b4527b8e445ac050016bf95c64887

Files

a32b4527b8e445ac050016bf95c64887
.dll windows:4 windows x86 arch:x86

849a6631269e64d1cea9be0deb47d17a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
ExitProcess
ExitThread
FindResourceA
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetThreadContext
HeapAlloc
HeapCreate
HeapReAlloc
IsBadStringPtrA
MultiByteToWideChar
ReadProcessMemory
RtlUnwind
SearchPathA
SetLastError
SetUnhandledExceptionFilter
WaitForSingleObject
WriteConsoleW
lstrcpynA

msvcrt

__getmainargs
__p__commode
__set_app_type
_except_handler3
_exit
exit
malloc
srand
wcslen

user32

BeginDeferWindowPos
CheckRadioButton
CreateDialogParamA
EmptyClipboard
FrameRect
OpenClipboard
SetWindowPlacement
ShowWindow

winmm

mmioAdvance
mmioAscend
mmioFlush
mmioSendMessage
mmioSetInfo
sndPlaySoundA
timeBeginPeriod
waveOutGetNumDevs

Exports

Exports

SetStreamFrameRate

Sections

.text
Size: 95KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ