c68c0099b1b82893207095e432c74a50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c68c0099b1b82893207095e432c74a50
Size

84KB
MD5

c68c0099b1b82893207095e432c74a50
SHA1

d8ded6bc692880c7aedced41a7ce68cbbcc48a46
SHA256

fdb1482cbe01fc628598226f6ea3f92022f7f337447032e90fda26438effee73
SHA512

57c53810332a4abecb7091cfa62f81c9e8f81d08472f38911881976929b6ed0cc0425e6614ae6b5142c5c9cb1e056647d2314d059ccb20f7936d154ed55fb23b
SSDEEP

1536:onyZAUoWRPenJGCf9J7wwhcQMhT1NJSzy7TT5I2JUAPnFo2p+J/a:YyZlRPeJxf91wicXFJfIwNPntpy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c68c0099b1b82893207095e432c74a50

Files

c68c0099b1b82893207095e432c74a50
.dll windows:4 windows x86 arch:x86

9af75be37bdd7b74a18324598a388c0d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommModemStatus
RemoveDirectoryW
GetCommState
GetDiskFreeSpaceA
LocalUnlock
UpdateResourceA
GetSystemDefaultUILanguage
GlobalReAlloc
LoadLibraryA
GetCPInfo
GetProcAddress

user32

GetKeyNameTextW
CharUpperW
SetThreadDesktop
GetDesktopWindow
ReplyMessage
InsertMenuW
SetPropA
GetSysColor
GetTabbedTextExtentA
InsertMenuItemW
FillRect
GetScrollRange

shlwapi

StrFormatByteSizeW
PathRemoveExtensionW
UrlEscapeW
SHDeleteKeyW

gdi32

SetRectRgn
DeleteObject
CopyMetaFileA
OffsetRgn
CombineRgn

Exports

Exports

UtilWIUI

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ