c58922de8e5debae91e5c24d85e26bc5f37b7ec35e087c4b8f137059aa307802 | Triage

Sharing

General

Target

c58922de8e5debae91e5c24d85e26bc5f37b7ec35e087c4b8f137059aa307802
Size

163KB
MD5

c76016132933592fbcf16e9fb82a21d0
SHA1

657a4d86688e858aea3d2c066cbe6f33ceafd7d7
SHA256

c58922de8e5debae91e5c24d85e26bc5f37b7ec35e087c4b8f137059aa307802
SHA512

9a19c7de6016153aa9c67b5e026869b911470891b80d769e07f5cf1300a321ec1b67709a4a031773355a61614e0cf4315e911fe535097701ba37318bfd97a9d1
SSDEEP

3072:ear6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:os4p+ADxnSO6D2cOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c58922de8e5debae91e5c24d85e26bc5f37b7ec35e087c4b8f137059aa307802

Files

c58922de8e5debae91e5c24d85e26bc5f37b7ec35e087c4b8f137059aa307802
.dll windows:5 windows x86 arch:x86

a5d8d3bddce161fe65c4f476bd18c6da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

clusapi

ClusterEnum

user32

TranslateMessage

kernel32

LoadLibraryW
GetProfileSectionW
GetProfileSectionA
OpenSemaphoreW
CreateFileW
OutputDebugStringA
CloseHandle

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

advapi32

RegOverridePredefKey

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ