b707132b7803021c1a63a61550694f7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b707132b7803021c1a63a61550694f7c
Size

15KB
MD5

b707132b7803021c1a63a61550694f7c
SHA1

a1e437def5e6bfb1d606f7c55fcd77f079c5d974
SHA256

12d01213ff656dd93a36307c6a37818a709a218e9a41957d87fc56851e3ff4e1
SHA512

f7b1e6fccdfb5c17d26e2a60850b4ad00a8af9cc1799c5a879c17f9638ed68c1b59d61cd6528e5274a0fc8d4caca0ed0037414c5530727c6a19a875592d5bc8b
SSDEEP

192:u/zNzPmUJvF2E0unFYtDrgTY8Cpo6OZJPu9h6VGhddwCrJjmaDiWz5fW1rC7:u/tmfE0B1rg8C6EbGhdd5JjmkiW9fWs7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b707132b7803021c1a63a61550694f7c

Files

b707132b7803021c1a63a61550694f7c
.dll windows:4 windows x86 arch:x86

6853c8d2ff6e21ff8325f6c7931818ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetWindowsDirectoryA
CreateMutexA
CreateThread
ExitProcess
GetCurrentProcess
Sleep
DisableThreadLibraryCalls
GetProcAddress

user32

GetWindowTextA
GetForegroundWindow
FindWindowExA
wsprintfA

msvcrt

fclose
fopen
printf
fscanf

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
MSCON
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ