05840ea9ccee54159a17c1882ddb4e471a43a81aa5ac8f5a1cf7fdba3fd7e42e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05840ea9ccee54159a17c1882ddb4e471a43a81aa5ac8f5a1cf7fdba3fd7e42e
Size

2.8MB
MD5

04df42ebe52777ec05d0357430f32feb
SHA1

d1d0f44a325c65bbf263d849b1317a8e526848ae
SHA256

05840ea9ccee54159a17c1882ddb4e471a43a81aa5ac8f5a1cf7fdba3fd7e42e
SHA512

25c905d56d9dbc2b554dcbf154704fbc40006a86f7579e04b41c48a987eb683ef693155049dac7efb0810a05018241cddce1748e6e15dd37f767c81dc343fdda
SSDEEP

49152:vlmmUhglMjMg53dN43QjDni7+Bxpc5GpHyqJPJdkuaYWz5OPG+0ZdaiYWO3HWqRa:colSMgJ4MDi7QxpxtyiJdkJ54GXdbYWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05840ea9ccee54159a17c1882ddb4e471a43a81aa5ac8f5a1cf7fdba3fd7e42e

Files

05840ea9ccee54159a17c1882ddb4e471a43a81aa5ac8f5a1cf7fdba3fd7e42e
.dll windows:5 windows x86 arch:x86

33cec615a4f6cd3963a68410c5a2deb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsChild
CheckMenuItem

kernel32

FreeResource
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringA
GetModuleFileNameW
GetBinaryTypeW
GetModuleHandleW
GetModuleHandleA
GetProcAddress
AssignProcessToJobObject
IsDebuggerPresent
DeleteTimerQueue
GetCurrentProcess
TerminateProcess
RtlUnwind

urlmon

ReleaseBindInfo

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ