0084b7920a309d020f30847adbd70dcb83e2dffcd93c39d357b0c8146af845e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0084b7920a309d020f30847adbd70dcb83e2dffcd93c39d357b0c8146af845e1
Size

122KB
MD5

c57e478cb5d87ad025588e4ac7e037f7
SHA1

6fa9b87c42f6886b163996d13ff398b283fb0d55
SHA256

0084b7920a309d020f30847adbd70dcb83e2dffcd93c39d357b0c8146af845e1
SHA512

ed08420e9f945f4695749c69d92d0823e0e67a4f9ec39e3679138ef8d1bbc34ada40c0d4be5a303b9d816405204713510222955657503ec7a99b011ec44389e2
SSDEEP

3072:YnbJpEypKc+JjCc3Jcy006iSmmG/6icKdYlO1:qbJpd6GcOrmmi9cKd2O1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0084b7920a309d020f30847adbd70dcb83e2dffcd93c39d357b0c8146af845e1

Files

0084b7920a309d020f30847adbd70dcb83e2dffcd93c39d357b0c8146af845e1
.dll windows:4 windows x86 arch:x86

1df0de6e7c04336218c5d9de6fb34d44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
EnableMenuItem
LoadStringW
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 106KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ