d76aea94ae2f526e00e652f9a170ac30N

General

Target

d76aea94ae2f526e00e652f9a170ac30N
Size

60KB
MD5

d76aea94ae2f526e00e652f9a170ac30
SHA1

9be75985433d2e354486f17ee6075056bde02ddf
SHA256

ee2c4446629aa8573dc2afeb3a975168d1a4bb94b4e1f37dda7550ee78f57482
SHA512

e7b782ab6f3964d76e37ddb5bd3a9efd705e574dc2815a8944354a997f47edd55c56a1cdc8491583bcbbf75898f4960ece76354c0f87df1ea0ec9ee862c47fd7
SSDEEP

1536:vDzc/oiXapLTvV/5eAfoquaLJqVSKXlV:v4oiXapV5eqvIEsl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d76aea94ae2f526e00e652f9a170ac30N

Files

d76aea94ae2f526e00e652f9a170ac30N
.dll windows:4 windows x86 arch:x86

1a6076732639df3a6a07e60d8e6c5655

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
OpenEventA
GetLastError
WaitForSingleObject
CreateEventA
CreateThread
LoadLibraryA
GetVersionExA
GetModuleFileNameA
HeapFree
HeapReAlloc
HeapAlloc
SetEvent
Sleep
GetProcAddress
HeapSize
InitializeCriticalSection
GetSystemInfo
VirtualAlloc
VirtualProtect
ExitProcess
GetCurrentThreadId
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA

user32

EnumWindows
GetWindowRect
ScreenToClient
PostMessageA
GetWindowTextA
GetDlgItem
IsWindowVisible
ShowWindow
GetDlgCtrlID
SendMessageA
SetWindowsHookExA
CallNextHookEx

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a6076732639df3a6a07e60d8e6c5655

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 4KB