UhnmNusidshsd
Static task
static1
General
-
Target
MSIA69B.tmp
-
Size
1.9MB
-
MD5
acaf695bc3e4bb32bbd6f61b62f53c4c
-
SHA1
8acfce412f4cfc20441afb57fc4ba09e33479c7c
-
SHA256
011f5f9d9553e97030d97e0cb8f9450d9242330bb04c82ce02747029d72e687b
-
SHA512
e75ea96b9d38d089214d06049eedc8e0d122b97d5122ee1b199077004d12babbc7863e60b96f920d9c5b4a77853fd46f36322bab2819c748c5c5ad61cf3f6999
-
SSDEEP
49152:+7bLynb2l59BBTmnk0vRmp6LxUcscFH2x7MiFdJKD:Pg5ZgmQLxUcscFH2Si4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MSIA69B.tmp
Files
-
MSIA69B.tmp.dll windows:5 windows x86 arch:x86
5a2848780ae66e1b37c573cc0b4d1212
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
memset
abort
kernel32
OutputDebugStringA
GetModuleFileNameA
GetBinaryTypeA
HeapDestroy
CheckRemoteDebuggerPresent
GetCommandLineW
GetCommModemStatus
SetEvent
GetStringTypeA
LoadLibraryW
LoadLibraryExW
LCMapStringW
CreateThread
FreeResource
gdi32
CreateCompatibleBitmap
CloseFigure
SetMapperFlags
rpcrt4
RpcSsFree
oleaut32
GetRecordInfoFromTypeInfo
user32
ReleaseCapture
CallNextHookEx
DlgDirSelectComboBoxExW
GetWindowTextW
UnloadKeyboardLayout
GetDesktopWindow
setupapi
CM_Get_Device_Interface_ListW
SetupGetMultiSzFieldW
mprapi
MprInfoBlockRemove
advapi32
RegCloseKey
OpenThreadToken
AccessCheck
NotifyChangeEventLog
mscms
UninstallColorProfileW
Exports
Exports
Sections
.text Size: 804KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 4KB - Virtual size: 589B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Z Size: 864KB - Virtual size: 863KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FSi Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcYI4+N Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ