e21f47a49ad1a025880e3b90d2625788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e21f47a49ad1a025880e3b90d2625788
Size

13KB
MD5

e21f47a49ad1a025880e3b90d2625788
SHA1

d6038c227dfed2c2f86585bd133337197ff9cb7d
SHA256

9d7ae0b7355aff990dfc7a644e2e7ed33301fcfa8d394906f6cf3ca93a8d4449
SHA512

a54b44eb56ce143f315f67a34d4cf9f69b7344efdd65a5f4348137cdfbcb905d5e8a59c50a230d7f1097caf1ddea0437449274cd645d2cbd6e3083c36f7f38c7
SSDEEP

96:Mr3ddrhfwT+BYrMVORplJFeaZujarX8y8G0ulUJfkYPLT0QWZ0Q7mBsKy+1hIbgT:0/YLN3RlURkYR2Ky+LsI06QedKFZgP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e21f47a49ad1a025880e3b90d2625788

Files

e21f47a49ad1a025880e3b90d2625788
.dll windows:4 windows x86 arch:x86

7f48ace24e19634878f71d0f622b35c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
GetWindowsDirectoryA
ResetEvent
OpenEventA
FlushFileBuffers
HeapAlloc
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
GetLastError
lstrcpynA

user32

wsprintfA
GetForegroundWindow
CharLowerBuffA

advapi32

RegEnumValueA
RegOpenKeyA
RegCloseKey

wininet

InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ