a6b2f16a2be24b3a59e51ccbca32c782e3bf6513e573a7dd250869a2f998c44a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6b2f16a2be24b3a59e51ccbca32c782e3bf6513e573a7dd250869a2f998c44a
Size

2.7MB
MD5

25f86eef4c349c42fc76f8e66a5fbf31
SHA1

5ff4b5f0281e69beb3033abefbb23f3be5b00fa2
SHA256

a6b2f16a2be24b3a59e51ccbca32c782e3bf6513e573a7dd250869a2f998c44a
SHA512

a8fee42c809d468e44f8ad8b24419beda485addc7b9a7d727d45755777a22f5535b5ebade4b53d624a8a0e3974cf1684f3708dca279d4054c6bbb151efaea24c
SSDEEP

49152:4WvEzev0j1Oo+TXLgYkOM5LPj5NWqmK/4yQzlg8LanacoeZyNDjeoLVYU5:Dnv0j1OoaXiMq4y2lLOsPeouS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6b2f16a2be24b3a59e51ccbca32c782e3bf6513e573a7dd250869a2f998c44a

Files

a6b2f16a2be24b3a59e51ccbca32c782e3bf6513e573a7dd250869a2f998c44a
.dll windows:5 windows x86 arch:x86

3176d53b0a9f50a7a3d6baff9d9d0f30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetForegroundWindow
SetDlgItemTextA

oleaut32

VarDateFromCy

kernel32

AreFileApisANSI
SetPriorityClass
GetStringTypeA
GetModuleHandleW
OutputDebugStringA
GetModuleHandleA

mprapi

MprAdminBufferFree

gdi32

SetDCPenColor

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 77B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ