d50293e86cc4578524ff0afd9c9524ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d50293e86cc4578524ff0afd9c9524ca
Size

169KB
MD5

d50293e86cc4578524ff0afd9c9524ca
SHA1

fe8a834f604a5128bd3eecd335f42900956ad4cc
SHA256

bdd4c7b89eae9f13b714fd15ab53f5379557d178e8211869a8447038263460e7
SHA512

3eb52cee4592549e7e4c01c956f805c3ca36c113e99e55944ce430b94d38004b157e351a250a53d42b72ffba788932c4ab7d498c283c3a1ce2207499f338c9fc
SSDEEP

3072:QQp6mlBwglj3hrvbBIzqWlD3DO49qSU03H1Mji+QW4dejPrqsfjuCFR+1cz/j:b6QrljRjEq0hrnHKi+QW4dcP2sfij1cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d50293e86cc4578524ff0afd9c9524ca

Files

d50293e86cc4578524ff0afd9c9524ca
.dll windows:4 windows x86 arch:x86

966ebe610616e96ea7237c65a267dab2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetPixel
GetDIBits
GetBkColor

oleaut32

SafeArrayGetUBound
VariantChangeType
SafeArrayCreate
SysFreeString

comctl32

ImageList_Draw
ImageList_Destroy

kernel32

VirtualAlloc
GetVersion
GetVersionExA
IsBadReadPtr
ExitProcess
GetACP
LoadLibraryA

user32

SetTimer
EnableWindow
GetMenu
SetWindowLongA
SetScrollRange
IsCharLowerA
SetWindowLongW
CharNextA

Exports

Exports

9pTbYQom@8
CSFzxOExXforl
JX6vzdQbIo
_ahK6jAb0t6L

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ