64845d8fb1a0b2caf2ae72977de8ef1ae63d723754281a2576611f55aa2e7009 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64845d8fb1a0b2caf2ae72977de8ef1ae63d723754281a2576611f55aa2e7009
Size

2.6MB
MD5

713e3520449abb4dfff3ad77bcdac984
SHA1

eabbdc8bd26510d5a6360f162ec8bf115d58904e
SHA256

64845d8fb1a0b2caf2ae72977de8ef1ae63d723754281a2576611f55aa2e7009
SHA512

546b091acca582fb59f46f0d6b8aa1745ba1ab7db095914fcb3c1079c11330ccdce6b7a6db8982a6a49af52ecc7497bb0f9ae3b62041ed3675d68e18ff66af49
SSDEEP

49152:JaLIXOE4e7OZd8TDvB5Dpp5M0/ppQ8YEKwPcARgvy4crhUuv5SaDihXGUo:g8pj5Dpc6pu8YE3PfgvlcrCzaeYUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64845d8fb1a0b2caf2ae72977de8ef1ae63d723754281a2576611f55aa2e7009

Files

64845d8fb1a0b2caf2ae72977de8ef1ae63d723754281a2576611f55aa2e7009
.dll windows:5 windows x86 arch:x86

076207aeead90a060212c062d478f7df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mprapi

MprConfigInterfaceTransportGetHandle

advapi32

SetEntriesInAclW

oleaut32

GetRecordInfoFromGuids

gdi32

SetDCPenColor

user32

DlgDirListW
SetForegroundWindow

kernel32

AreFileApisANSI
SetPriorityClass
OutputDebugStringA
GetModuleHandleW
GetStringTypeA
GetModuleHandleA

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ