30c6027bf8147fe5c718bf6f7cf86eb6c245dcccdc626e3a18fde4c35e9ffc60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30c6027bf8147fe5c718bf6f7cf86eb6c245dcccdc626e3a18fde4c35e9ffc60
Size

2.7MB
MD5

8230f4827d0dca32fde34f465a314f16
SHA1

f0c62b6143fddd22e13a18ee6ad94dd9e0908d86
SHA256

30c6027bf8147fe5c718bf6f7cf86eb6c245dcccdc626e3a18fde4c35e9ffc60
SHA512

6bc71679b23a9fffe28087071f9119e6b314c3827cc310cdb4212e9ed86742ecaa27f089047ba2fefde4ad47acb0c6fcec18f8192c5381287683d95d9912a4fb
SSDEEP

49152:8u96jl1RkfMExZ0uHHojgGzNZ2LrQ6r8/cuDmlvJjhCNrb491xBXmUhUVu2IyTNK:8uojz6EeKuodzT2L06DqMviNKrN5Dy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c6027bf8147fe5c718bf6f7cf86eb6c245dcccdc626e3a18fde4c35e9ffc60

Files

30c6027bf8147fe5c718bf6f7cf86eb6c245dcccdc626e3a18fde4c35e9ffc60
.dll windows:5 windows x86 arch:x86

207ef34d80df0e2bccc4d51f4cf40954

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetForegroundWindow
SetDlgItemTextA

oleaut32

VarDateFromCy

mprapi

MprAdminBufferFree

kernel32

SetPriorityClass
AreFileApisANSI
GetModuleHandleA
OutputDebugStringA
GetStringTypeA
GetModuleHandleW

gdi32

SetDCPenColor

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ