c710c7dc8855bcf989d789a91d29e220 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c710c7dc8855bcf989d789a91d29e220
Size

7KB
MD5

c710c7dc8855bcf989d789a91d29e220
SHA1

0f9471e7f3fc76ad9cba93d943396bb740dc81f3
SHA256

67e5c80b322bd3b02e08dfbed7da8c2ebb778ea2b748fb6c5c63669bc08692f3
SHA512

8dd03acf0f8a9f0649464f91414692bbb0b1cce990bedfc0772ba66581ec277d4d67c36b7b69fa593f3c1025275225a5fb39c40d6cd62c5853d4234c792007ab
SSDEEP

96:V8r80jb6swgqIzaz1dS2li+QLBJOJmqki5hCDQ6:Z0fhaPiLBgJmqvHsQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c710c7dc8855bcf989d789a91d29e220

Files

c710c7dc8855bcf989d789a91d29e220
.dll windows:4 windows x86 arch:x86

6fb7acdba64eca47643fdb07f4407298

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetComputerNameA
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
Sleep
GetCurrentProcess
ExitProcess

user32

GetWindowThreadProcessId
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
FindWindowA

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

msvcrt

sprintf
_adjust_fdiv
malloc
_initterm
free
memcpy
strchr
strncpy
strrchr
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
_stricmp
strcmp
strcat
strcpy
strlen

Exports

Exports

fa
fb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdat
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ