10306702a13bfd1d9c8208394eaf42eddcbe49a03f039f7715ad31579db2b6dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10306702a13bfd1d9c8208394eaf42eddcbe49a03f039f7715ad31579db2b6dd
Size

103KB
MD5

e9f6513c37debcce50e9633aefa757c0
SHA1

e7623d6cb0cf234b9f3e3f8b14f63e2077441a0f
SHA256

10306702a13bfd1d9c8208394eaf42eddcbe49a03f039f7715ad31579db2b6dd
SHA512

de6d502b6bb6d6b46d5b0170db2e3f22f376f5370b6fe6793efbe3ea2207e65033d0b3e0b195b90833ec305bd0decffb6264f2dc973160dbdc330646af242d74
SSDEEP

1536:QzICS4A30TY1kUS/U2ztdS1I6DdL9Ta1lx1411ey2NzPBmdy6h+/:vJ0TYyUS/U2RgGWL9+zx1c1eXNNmdA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10306702a13bfd1d9c8208394eaf42eddcbe49a03f039f7715ad31579db2b6dd

Files

10306702a13bfd1d9c8208394eaf42eddcbe49a03f039f7715ad31579db2b6dd
.dll windows:5 windows x86 arch:x86

07530c85f3bf8d18d55bc566a43ea905

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

CreateSolidBrush
TextOutW
SetTextColor
SetDCBrushColor
GetPixel
GetDeviceCaps
CreateFontW

user32

GetMessageW
IsDlgButtonChecked
LoadImageW
DefWindowProcW
CreateMenu
CreateWindowExW
DialogBoxParamW

kernel32

GetAtomNameW
SetLastError
GetTickCount
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLocaleInfoW
GetLastError
FreeLibrary
GetFileAttributesW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ