4223a5a49fd38db650f111ba377a754c90ed9ac5576d5dde1cb708a50b2bb3e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4223a5a49fd38db650f111ba377a754c90ed9ac5576d5dde1cb708a50b2bb3e6
Size

1.6MB
MD5

37df13fcb7abfb11149ea774881bcb48
SHA1

fc459137e38aa652d1a2654fb33b2317f1d49991
SHA256

4223a5a49fd38db650f111ba377a754c90ed9ac5576d5dde1cb708a50b2bb3e6
SHA512

a9e000fa6bee2a19b531e34d871efd769bf035a7d404ca85007b07396c64e0d432d2f471daeb36ee38dbe1b5f06ff68f2405cdb59e49229c4375b7fcce7b1cef
SSDEEP

49152:1Z/KWulw2FLy85zHKIVRxS6QZHhI3p9jS6z3vdMPYRn:1dKZ2K95zTHSzZBQ7dMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4223a5a49fd38db650f111ba377a754c90ed9ac5576d5dde1cb708a50b2bb3e6

Files

4223a5a49fd38db650f111ba377a754c90ed9ac5576d5dde1cb708a50b2bb3e6
.dll windows:5 windows x86 arch:x86

fdb5a536990c89c8190cad404d262b32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetDCPenColor

oleaut32

GetRecordInfoFromGuids

msvcrt

wcscoll

kernel32

SetPriorityClass
AreFileApisANSI
GetModuleHandleA
OutputDebugStringA
GetStringTypeA
GetModuleHandleW

mprapi

MprAdminGetErrorString

user32

SetForegroundWindow
FreeDDElParam

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ