84e8fc611bf22a5994cc320005a7bec1cca7603f374cfb232b5affddcbeea0c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84e8fc611bf22a5994cc320005a7bec1cca7603f374cfb232b5affddcbeea0c0
Size

2.7MB
MD5

6d4524f410e7933e637ff8537ab5b27f
SHA1

0ae9fc2c19e8cbb22b001ce45f5be64ec93e3854
SHA256

84e8fc611bf22a5994cc320005a7bec1cca7603f374cfb232b5affddcbeea0c0
SHA512

02a28dc996281b62314c336b97a0b0df768bc739fddb068110f08ad9f180e446848f91f9a9cb1991086b1bc514421f93b371da0ee34e871c89158ff68788b091
SSDEEP

49152:TeWcLhm87WU8zqGIrMdWOSL6+5zF59PpZSP7efHGpvCf/FF:6W2w8gGGIYML6+5z79Hgeuqf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84e8fc611bf22a5994cc320005a7bec1cca7603f374cfb232b5affddcbeea0c0

Files

84e8fc611bf22a5994cc320005a7bec1cca7603f374cfb232b5affddcbeea0c0
.dll windows:5 windows x86 arch:x86

d59898592cc99b6453c7e0f261ff20b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetRecordInfoFromGuids

mprapi

MprAdminInterfaceTransportAdd

gdi32

SetDCPenColor

user32

SetForegroundWindow
SystemParametersInfoA

msvcrt

wcscoll

kernel32

GetModuleHandleA
GetModuleHandleW
OutputDebugStringA
SetPriorityClass
AreFileApisANSI
GetStringTypeA

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 81B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ