ede3c45ac1228a2a00c38151a1d32233e61a86e6d928c4ffcb8682753a829f27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ede3c45ac1228a2a00c38151a1d32233e61a86e6d928c4ffcb8682753a829f27
Size

2.7MB
MD5

38feb9693d4f08bd54c066d61bef884b
SHA1

bc0387123ab8c9006963b0f3ea0570bd8ba77f2e
SHA256

ede3c45ac1228a2a00c38151a1d32233e61a86e6d928c4ffcb8682753a829f27
SHA512

8628e6915f9079eaa0167182909ec8d363dfe9b3f984d9ba31e4656cb3f2be7e6c85e632f1ba8a895e67f6007f06919594e263758e1cd74008c12a280cb4a82f
SSDEEP

49152:5GUp0v5RWMni1E/vpsJIbSFq+fUqv1cdsV+izFemDo8ZWvQ4LFSgOC+1qZ:Lmv54M1vEIbBiSdYBloE4LF/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede3c45ac1228a2a00c38151a1d32233e61a86e6d928c4ffcb8682753a829f27

Files

ede3c45ac1228a2a00c38151a1d32233e61a86e6d928c4ffcb8682753a829f27
.dll windows:5 windows x86 arch:x86

cbe0659530cc150cd77e8bfb9f5e211a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetDCPenColor

oleaut32

VarDateFromCy

user32

SetDlgItemTextA
SetForegroundWindow

mprapi

MprAdminBufferFree

kernel32

AreFileApisANSI
SetPriorityClass
GetModuleHandleA
OutputDebugStringA
GetModuleHandleW
GetStringTypeA

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ