c58a079948fe10f89c9c5c7a857e1aa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c58a079948fe10f89c9c5c7a857e1aa4
Size

225KB
MD5

c58a079948fe10f89c9c5c7a857e1aa4
SHA1

6fc98d67edd07be7d54057891cd4ae963271a184
SHA256

23de99a9aa92ac8d6e29f30d1a422136cc74ea1659d2feb151cdc8f8158ba6e4
SHA512

f7ace7bc787ecb1436e1ddf7d946bd59346f0ed1d0a91f8a27565a14d5d408d2fcf9de714eac7aa37a18160a0cf5e00cbbe981fc8a0a1b65a2fc4a3629b10cb7
SSDEEP

3072:PX4XfayXksrX2IYmMp+p/vhuS+KUbwvY:f4vJXk+X2IysKS+fM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c58a079948fe10f89c9c5c7a857e1aa4

Files

c58a079948fe10f89c9c5c7a857e1aa4
.dll windows:5 windows x86 arch:x86

4e6e0e17ae9892c969f90431b401080d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegEnumValueW

kernel32

ExitProcess

user32

GetCursor
GetScrollInfo

Sections

.gmop
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ahllo
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bkba
Size: 157KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.anni
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aefl
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE