8416e41039685d3bff449143d0dadee43dcb1a59595a174e87139dd26f0d4a16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8416e41039685d3bff449143d0dadee43dcb1a59595a174e87139dd26f0d4a16
Size

2.4MB
MD5

62b16163e6784dbf4c6ea2b3a9875b7f
SHA1

ae2d63178feced630ef18ed4286617677cf77887
SHA256

8416e41039685d3bff449143d0dadee43dcb1a59595a174e87139dd26f0d4a16
SHA512

5219d6e44ff8b32bfa99ab1498dbe63dc9526bac3af39baab9de2a9ed96e34ba1a7a28ee0f4f9744a0947acf4d3fdee7067e0e7aba59e117af74ea321278232b
SSDEEP

49152:41P7nPQNbdAJRkcJ78E2naF2KUZkkzdzMj6Bpwhj3tq5:4dTPQXiRk68E2naFDUZkkJ77yt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8416e41039685d3bff449143d0dadee43dcb1a59595a174e87139dd26f0d4a16

Files

8416e41039685d3bff449143d0dadee43dcb1a59595a174e87139dd26f0d4a16
.dll windows:5 windows x86 arch:x86

8e1aaf9670bb49cb50f28d91dd20ed6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetForegroundWindow
GetMenuContextHelpId

advapi32

GetServiceKeyNameA

oleaut32

GetRecordInfoFromGuids

mprapi

MprConfigInterfaceEnum

kernel32

SetPriorityClass
AreFileApisANSI
LoadLibraryExA
GetStringTypeA
OutputDebugStringA
GetModuleHandleW

gdi32

SetDCPenColor

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 290B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 396KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ