c3297bc848fb07b6d8805c64588d29df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3297bc848fb07b6d8805c64588d29df
Size

75KB
MD5

c3297bc848fb07b6d8805c64588d29df
SHA1

221215990c61591e2a8015c6cb7b623c4c74febd
SHA256

6fcfda4771047238634b043f834dccc356818d4fcfe2fcf796e00f156ea89316
SHA512

7d85db81cfbe58fdc0efd3b5895709e64542cecd6f3c7b19cb2c030f153ba5cf525ba009bad23eeefa23a3729aff20973b769d7d3a09a86d6af56df7710a2d34
SSDEEP

1536:TgUbdKggMv8Sgi2XvSTEjn1spkz+kwBQFPnYtYuxxiaiAWXfdRp:TgUBKg/nj2/S4Cpkz+kntwcailVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3297bc848fb07b6d8805c64588d29df

Files

c3297bc848fb07b6d8805c64588d29df
.dll windows:4 windows x86 arch:x86

71d2c4d110f1d1022a21368dab4abb2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetModuleHandleW
GetVersionExA
HeapAlloc
HeapCreate
LocalFree
lstrcmpA

advapi32

AccessCheckByTypeResultListAndAuditAlarmA

setupapi

SetupDiOpenDevRegKey
SetupUninstallOEMInfW

user32

SendMessageA
SendMessageTimeoutW
GetIconInfo

Sections

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ