d7871aa32cff57f329855f51ab4a606f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7871aa32cff57f329855f51ab4a606f
Size

61KB
MD5

d7871aa32cff57f329855f51ab4a606f
SHA1

3c9997bebfbd25f05c9ed6c134ef5d892ffb8034
SHA256

c3b080d6388fe95e4e9216a20c951a413ccde8cce6efa577e22a2b5183439fcf
SHA512

4b291b1e2b344d008589f52f4c4438bf4df34a9af796b0e8c1d3b46c5548edd6fa6a8c36431737bc5079ea48fa452fc1bdbeb8bb0ad4686d76fad19bfd3e1766
SSDEEP

768:/aluaTWBwhMNqiR4lZVb/DYNBedNHveftNgD6AfIiVYoQyUYRX8eRWAzfExS:/AuVaoZYV3mgkekoQy/l8fIExS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7871aa32cff57f329855f51ab4a606f

Files

d7871aa32cff57f329855f51ab4a606f
.dll windows:4 windows x86 arch:x86

3d272a52023a5a920a3b4cb5f29185b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetFocus
DestroyWindow

kernel32

HeapFree
GetVersionExW
ExitProcess

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ