634be3eba4e16b57d34d92dd3d228e5dc7c9318c2521ea6b3d5f41d678d1b5e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

634be3eba4e16b57d34d92dd3d228e5dc7c9318c2521ea6b3d5f41d678d1b5e4
Size

1.6MB
MD5

f744c36f3833b6839617e46f8f6865ad
SHA1

bf7013733b957fa353c31d547bd1a4b46a15b788
SHA256

634be3eba4e16b57d34d92dd3d228e5dc7c9318c2521ea6b3d5f41d678d1b5e4
SHA512

082c4e355bb4370300066ba159dd864267a84eb70076c8bdfcbd795b6f68715138e36ccb6269f41467dce82f621f18c1c14cca890e7f34294643e4071f5f7126
SSDEEP

49152:LZ/KWulw2FLy85zHKIVRxS6QZHhI3p9jS6z3vdMPYRn:LdKZ2K95zTHSzZBQ7dMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634be3eba4e16b57d34d92dd3d228e5dc7c9318c2521ea6b3d5f41d678d1b5e4

Files

634be3eba4e16b57d34d92dd3d228e5dc7c9318c2521ea6b3d5f41d678d1b5e4
.dll windows:5 windows x86 arch:x86

fdb5a536990c89c8190cad404d262b32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetDCPenColor

oleaut32

GetRecordInfoFromGuids

msvcrt

wcscoll

kernel32

SetPriorityClass
AreFileApisANSI
GetModuleHandleA
OutputDebugStringA
GetStringTypeA
GetModuleHandleW

mprapi

MprAdminGetErrorString

user32

SetForegroundWindow
FreeDDElParam

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ