a3b479236068670d1d5656ea7918b3ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3b479236068670d1d5656ea7918b3ae
Size

149KB
MD5

a3b479236068670d1d5656ea7918b3ae
SHA1

0632930e0d094cf114914df09152607557904cbe
SHA256

bdda534e651ad9421a2ea584665c722c65925f2d364d2e024b2737acbf79428d
SHA512

6e726388f689a3985d103611e000462cdbeb3f939abf8723416c768667b8b2e0a9e1f58100037f3312aed18008f15bc6259f23bac035af179a17030c51ed4c74
SSDEEP

3072:G/k3WnVgl/PK4MOevWWgUYb6NcGKO/7G+pjjgW8PjR+jO8QwK:oV+YeR0wS7Ggjjg7PaO3wK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3b479236068670d1d5656ea7918b3ae

Files

a3b479236068670d1d5656ea7918b3ae
.dll windows:4 windows x86 arch:x86

b1c631f5410469542a8ce6f24b0a30f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
EnableMenuItem
DrawTextA
CreateDialogIndirectParamA
CharUpperA

kernel32

ExitThread
lstrcmpiA
WriteFile
TlsGetValue
LocalAlloc
LeaveCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetCommandLineA
GetFileSize

Exports

Exports

D520CCGG7G@7C1g4aG1DGD1<CGFF2DF76
AiiFdkPkijdaKjr
AiiB`qFidvvJgo`fq
AiiW`blvq`wV`ws`w
AiiPkw`blvq`wV`ws`w
Kjqlc|Ijbjk
Kjqlc|Vmpqajrk
Kjqlc|Vqdwqpu
dm

Sections

.text
Size: 18KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ