b656e1de32efc74d46c105b4a63688c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b656e1de32efc74d46c105b4a63688c3
Size

13KB
MD5

b656e1de32efc74d46c105b4a63688c3
SHA1

b10922e5ea3780498e4467e0570a0543f2e3ba10
SHA256

4d82c8c3bc0e6efd7be6da39908da603f0c9be495df72e7a321b1044bb388c4f
SHA512

d6d4b7f46bf0289222dd94b69e7f4648d9c6856c7f1fd4a778ce7afc113eb2207b22f275f3f026e86bde8e81ef9af27ab31d30340d30c044a16394d1e0ab831c
SSDEEP

24:eH1GSdtNMy984i2a5sgNfsrsCqtK0TKW4tsJAR/NDMf+n/rx6LArZ0oyC2hBuBeC:ypPLi2aLstqY1tn/dLEfuBeuR5c+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b656e1de32efc74d46c105b4a63688c3

Files

b656e1de32efc74d46c105b4a63688c3
.dll windows:4 windows x86 arch:x86

7b14debe34ef27ced8370673ed8b0b41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateWindowExA

kernel32

GlobalAlloc
LoadLibraryA
MultiByteToWideChar
GetWindowsDirectoryA
Sleep
lstrcatA
lstrcpyA
lstrlenA
GetVersion
GetTickCount
GetProcAddress
GetFullPathNameA
GetCurrentProcess
ExitProcess
DeleteCriticalSection

gdi32

GetDeviceCaps
GetDIBColorTable
GetDCOrgEx
ExtTextOutA
CreateHalftonePalette
CreateEnhMetaFileA
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDIBits

Exports

Exports

Prkt

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ