b85eac61605ffccef3504c794219c5a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b85eac61605ffccef3504c794219c5a4
Size

7KB
MD5

b85eac61605ffccef3504c794219c5a4
SHA1

0e57e8e82531b038228fda78769958927b3416ec
SHA256

cb7aff5e79bc7af1fa85313fe63bf0df8c4dc5f407a0fd5798cdb4e7fc2323eb
SHA512

95af15f4437429ce284e5698d3f6111951af5a0a13c59aae9e43dba7b892effe9879dfa9b01251991d3af3274354b6d6d8d4142b46779d609e8ef2a2a4117e9c
SSDEEP

96:ei+4ymD0LAe00d8gEQC48Ysn3wiMRmpn8TMn+k6tLq:H7MLAUmgEJvAyh8TMMtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b85eac61605ffccef3504c794219c5a4

Files

b85eac61605ffccef3504c794219c5a4
.dll windows:4 windows x86 arch:x86

f630400bc8334cc3c4c33640c38fa2c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
IsBadReadPtr
GetCommandLineA
CreateThread
VirtualProtect
GetProcessHeap
HeapAlloc

user32

BroadcastSystemMessageA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA

msvcrt

free
_adjust_fdiv
_initterm
strncpy
sscanf
malloc
_strcmpi
_except_handler3
strrchr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ