905d29ad5e866d32a03dc02f9fda8844fad2d6f69e13e7a836d17a36c7de259e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

905d29ad5e866d32a03dc02f9fda8844fad2d6f69e13e7a836d17a36c7de259e
Size

2.2MB
MD5

fe4ea28e852d327457c6876471772779
SHA1

a84ca6f907caa016aa9be960937bedb7b9325297
SHA256

905d29ad5e866d32a03dc02f9fda8844fad2d6f69e13e7a836d17a36c7de259e
SHA512

c0d1733082c9652a773882cab056f4e06471064507ca2692744ecaf8da8434c0fe0cc2c591ef4b28c63f27d0f1d2289dd5cea3e27213937efd28544c5e57023f
SSDEEP

49152:ufI3S/FytNc8ngQoXkc09P9vr7FuXTfJ59KlhLS0VXsLoOI:mRoNc8ngt05dHFetnES0dsc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
905d29ad5e866d32a03dc02f9fda8844fad2d6f69e13e7a836d17a36c7de259e

Files

905d29ad5e866d32a03dc02f9fda8844fad2d6f69e13e7a836d17a36c7de259e
.dll windows:5 windows x86 arch:x86

322ab185b2fdf4582116c2e45af10db6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetRecordInfoFromGuids

mprapi

MprAdminInterfaceTransportAdd

msvcrt

wcscoll

user32

SystemParametersInfoA
SetForegroundWindow

kernel32

SetPriorityClass
AreFileApisANSI
GetModuleHandleA
GetModuleHandleW
GetStringTypeA
OutputDebugStringA

gdi32

SetDCPenColor

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 999B

IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ