c39a7f2a32cd76b4806b216b6a7f8fb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c39a7f2a32cd76b4806b216b6a7f8fb9
Size

6KB
MD5

c39a7f2a32cd76b4806b216b6a7f8fb9
SHA1

5adee7eee47ee6aa1d7bf4d873d4a2ebab785072
SHA256

a34df63e495c6e057d5fb809fc44fa59326b54d85e57cd454160ea0116cec5f3
SHA512

42c00002cecc4ee8ba6bc7a37b6fea0f84c943c8abda3b04286787daaf9879cf2e666b43af58308e56f067ec76f0b02f8c48c1d2953587891956e70ee9ceee6e
SSDEEP

96:AEOE2BRO7KxmjpMGZErkpoHCdV0Ah1ORCmA3YQ5+kgtO2jthRWdKF3J:AEOS7Kx4ivrkpoHCdV06IRbKKFthRWd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39a7f2a32cd76b4806b216b6a7f8fb9

Files

c39a7f2a32cd76b4806b216b6a7f8fb9
.dll windows:4 windows x86 arch:x86

90474fb1d7a965f9c7b15ca8387d256d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
Sleep
GetLastError
HeapAlloc
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
CloseHandle
lstrcpynA

user32

wsprintfA
CharLowerBuffA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA

wininet

FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCrackUrlA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ