4139750de87ae20f61dc09c6d4b8d5b46dd1955b126193dbf517ba107c6c6de9 | Triage

Sharing

General

Target

4139750de87ae20f61dc09c6d4b8d5b46dd1955b126193dbf517ba107c6c6de9
Size

2.2MB
MD5

1d380c7a708e890e8e70ecfdefd91fad
SHA1

df1da0267ea9811ef14e362b40ea6e97b78357e7
SHA256

4139750de87ae20f61dc09c6d4b8d5b46dd1955b126193dbf517ba107c6c6de9
SHA512

826803be788b35f9127c8b50956bc48cd507365a7d263da61c26a631cedc3b63c8015a405266e20f33773d576c71947249accda581b5eef565d499fce1be0bc0
SSDEEP

6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqNg:ZoidiofStl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4139750de87ae20f61dc09c6d4b8d5b46dd1955b126193dbf517ba107c6c6de9

Files

4139750de87ae20f61dc09c6d4b8d5b46dd1955b126193dbf517ba107c6c6de9
.dll windows:6 windows x86 arch:x86

f6e78a44fb426322e4a2ad9bdbb39b63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
WaitForSingleObject
CreateFileA
GetLastError
WideCharToMultiByte
DeleteCriticalSection
GetProcAddress
LoadLibraryA

user32

GetWindowThreadProcessId
PostThreadMessageW
PostMessageW
SetTimer
CreateWindowExW

Exports

Exports

HorekGlepW

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ