658d800219c429bd1cb186d7e79cfc26d19b995185b5ac36eb4bb03c303120e6

General

Target

658d800219c429bd1cb186d7e79cfc26d19b995185b5ac36eb4bb03c303120e6
Size

288KB
MD5

049e29d3442e81963d0cb4bd3451cf6f
SHA1

338114d036de5650a0213bc1d9a31da01270cb7c
SHA256

658d800219c429bd1cb186d7e79cfc26d19b995185b5ac36eb4bb03c303120e6
SHA512

ae1dd59d781b507be8e66e0356ee69e38c42899dd261c4b3857590e610eb5f5bbffd9684a2270f36cb976869256377232f8e329535877dbfebc8636b93990102
SSDEEP

6144:bSQtq4XmZZZi5/mHCLROrlMfjtjVtfPulBk527mkNDaO:bxJilMtVtsm27mkdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
658d800219c429bd1cb186d7e79cfc26d19b995185b5ac36eb4bb03c303120e6

Files

658d800219c429bd1cb186d7e79cfc26d19b995185b5ac36eb4bb03c303120e6
.dll windows:4 windows x86 arch:x86

550945480283b80768dbd42f9be82e94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
WritePrivateProfileStringW
BuildCommDCBAndTimeoutsA
ReplaceFileA
SearchPathA
FindAtomA
ExpandEnvironmentStringsW
GetComputerNameA
GetFileInformationByHandle
GetConsoleAliasExesLengthW

user32

GetForegroundWindow
GetMenu
GetMenuDefaultItem

dsprop

ADsPropShowErrorDialog
ADsPropSetHwnd
PostADsPropSheet
ADsPropCheckIfWritable
ADsPropGetInitInfo
IsSheetAlreadyUp
ADsPropSetHwndWithTitle

Exports

Exports

AvailableReflect
ComeWriteUse
CurrentFlexible
DesktopVariousDocument
ElementTask
ExpandEnsure
FastPrependStorage
HelpfulVisualSpecify
ManageHome
OptimumNeverConsole
PackComputerVolume
PackageThread
PurposeDatabaseGeneral
SaveNonzero
SettingHandle
TransactedMethod

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

550945480283b80768dbd42f9be82e94

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dsprop

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 240KB - Virtual size: 236KB

.reloc Size: 4KB - Virtual size: 462B

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 240KB - Virtual size: 236KB

.reloc
Size: 4KB - Virtual size: 462B