c5a63312114b29477dd63dff67917f66291d515f5696fe413743d691ebdfc5aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5a63312114b29477dd63dff67917f66291d515f5696fe413743d691ebdfc5aa
Size

2.2MB
MD5

41b3a6a787d2c57351235543cb287851
SHA1

072fed1c16e7070b0d152551415d47d7c7009d5f
SHA256

c5a63312114b29477dd63dff67917f66291d515f5696fe413743d691ebdfc5aa
SHA512

5c8a37bb31864205cc94f27d74a0a371dac871f71f80bc833d9d23d8e6419cc3c46af7f19b96586cd4c46117b111bb98ab674b52f478b11682f383bca0f39031
SSDEEP

49152:VZ2bh6qE0RLLu30871Lu2lftSrkR56i75iNV38FYeOVENfLUjxkjr:L2V6qBLCrA8MrW6iTWfVMfLUMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5a63312114b29477dd63dff67917f66291d515f5696fe413743d691ebdfc5aa

Files

c5a63312114b29477dd63dff67917f66291d515f5696fe413743d691ebdfc5aa
.dll windows:5 windows x86 arch:x86

adbe7609850bab6528184bd97bf27ea5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscoll

kernel32

OutputDebugStringA
GetStringTypeA
GetModuleHandleW
GetModuleHandleA
AreFileApisANSI
SetPriorityClass

oleaut32

GetRecordInfoFromGuids

gdi32

SetDCPenColor

user32

SetForegroundWindow
SystemParametersInfoA

mprapi

MprAdminInterfaceTransportAdd

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 63B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 999B

IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ