c486a77d0d1fc94e7c586235589c37e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c486a77d0d1fc94e7c586235589c37e7
Size

15KB
MD5

c486a77d0d1fc94e7c586235589c37e7
SHA1

ac29e4a42d346e3c90843c43055f0d605ce4997a
SHA256

bb8093ff40ef57bb0edbc5e8d5b4d3ae25402bc195e5bc8a4d7435a0046df8ff
SHA512

6a40be2373b3e3c06e9d82504d4c3b1194684002174e7a8316d7923e1e8728dbc42239be35b04e4897c3e0ad9d64a3ebf4031db86282614fc8d69fb7091fabde
SSDEEP

384:sxSDqRyY9pGT5SywikbuXIx3WetR0XqrZ:1Y7Gd/whbBxGez0Xq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c486a77d0d1fc94e7c586235589c37e7

Files

c486a77d0d1fc94e7c586235589c37e7
.dll windows:4 windows x86 arch:x86

218a5ee4f29b12e4cd6ad494ba08c1ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ