f5288c447e5075a36d8742b621e380467f6a9087ab66531f642163889f522935 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5288c447e5075a36d8742b621e380467f6a9087ab66531f642163889f522935
Size

40KB
MD5

dde23a19528d94110b35cc4d23910c3d
SHA1

6815fcb5c677afda5ba3151e8157588faf8be61e
SHA256

f5288c447e5075a36d8742b621e380467f6a9087ab66531f642163889f522935
SHA512

c6e7bda3e88eb2446b84ad487ba4bec1829ca2f23fcdc000d74db3029f5f96ee3d1964310dbc4ea682c557e7fb34969f05eb5332dac4a3427cf8d412fe6d2aac
SSDEEP

768:HWJ4Uu1Jkby4mZbfijrqLfnrRxlugZDgIm76LY4hdSIp2jwqU:2J4Uu1JyyFQ3QjRPVmIm76M0dSpr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5288c447e5075a36d8742b621e380467f6a9087ab66531f642163889f522935

Files

f5288c447e5075a36d8742b621e380467f6a9087ab66531f642163889f522935
.dll windows:5 windows x86 arch:x86

42fb9692a824e417416408cd022b278d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetModuleHandleA
GetProcAddress

user32

GetDesktopWindow

advapi32

RegQueryValueA

Exports

Exports

hgdsdhtde
kcrnvvhw

Sections

.text
Size: 1024B - Virtual size: 717B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ