a56c842f34720e407724e52b85ee88f0f80dae96284ddb4695210d62f7ebe7ad | Triage

Sharing

General

Target

a56c842f34720e407724e52b85ee88f0f80dae96284ddb4695210d62f7ebe7ad
Size

1.7MB
MD5

36884c7f4d860049fbd5b8c235191711
SHA1

6ce4bf5cfe77acb12c274d53526120879982bb93
SHA256

a56c842f34720e407724e52b85ee88f0f80dae96284ddb4695210d62f7ebe7ad
SHA512

3b911c0f9d7de5e8b3bc10a307c860709563fc7aa02f29385393dfbcb33266f3abace626681858c93735dfea01e6a3632041e0dac2a8cd78f170c326e69bde21
SSDEEP

6144:QshRn0xQiS7bHKVLk6cAw3nLbg2K3i9QMGeuJIbOjlvJ+XWeR6eS4P4BSMY8qkPa:nhRnh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a56c842f34720e407724e52b85ee88f0f80dae96284ddb4695210d62f7ebe7ad

Files

a56c842f34720e407724e52b85ee88f0f80dae96284ddb4695210d62f7ebe7ad
.dll windows:6 windows x86 arch:x86

1fa671711f279705d6bd2c8cc8ae7b82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
GetLastError
InitializeCriticalSection
WideCharToMultiByte
CreateFileA
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA

user32

SetTimer
PostMessageW
GetWindowThreadProcessId
CreateWindowExW
PostThreadMessageW

Exports

Exports

HorekGlepW

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ