c0980d275fdb6cacaefff126e1c860e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0980d275fdb6cacaefff126e1c860e3
Size

191KB
MD5

c0980d275fdb6cacaefff126e1c860e3
SHA1

af03387cda3ed4597e22ac238b85243ddec0c3f8
SHA256

c71d4d820315585e1aec4386601fe22b4e215fb990ee59ff6b6c0d07903e6b63
SHA512

3ff07acf80a57f73b8ee52f950e9e2655226d925c95f543aa0304bdf2e42d1692f8be84f331f2d57f269c7e95810d0ae8846b06833dfabc32aebe33b0ba72e0a
SSDEEP

3072:KMoaY/uBFNEGgxxfHEEqej2r5Ux8LorfGcDrCrfOy+PoDC1zC/0G9IgN3MUvZXpg:JoaWuBFNEGeHEEqej2r5Ux8LorfGcDry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0980d275fdb6cacaefff126e1c860e3

Files

c0980d275fdb6cacaefff126e1c860e3
.dll windows:1 windows x86 arch:x86

e54fde7d1bcc8060e8441555f52b4862

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.code
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ