862866f4c6c8dda9c054b7223b7976d0N | Triage

Sharing

General

Target

862866f4c6c8dda9c054b7223b7976d0N
Size

19KB
MD5

862866f4c6c8dda9c054b7223b7976d0
SHA1

b6f42262a8012720311647ed9457da79859c7e18
SHA256

e235cfa537940f25c1feb9fc01800ee5c921c6d12c390a51cc5002057e0a09dd
SHA512

1cd7944917c525d69aba5707ff7d0882fada97eebb6e76f8c1a66e454b711ba2c702ae9191680e8b7b0a856d407e600595466285ef223f9b65d0ec130da1a57a
SSDEEP

384:ebLrzLTJZ+OdNUNidk1r67GlZ+6/oSCB5dmF7j0Mv9:gLDL+1NidIWGlro5dm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862866f4c6c8dda9c054b7223b7976d0N

Files

862866f4c6c8dda9c054b7223b7976d0N
.dll windows:1 windows x86 arch:x86

9ea49559efdd19316b5b7a7e3aa08dc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileW
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameW

ntdll

memcpy
memset

Sections

.code
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ