522381[.]dat | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
522381.dat
Size 904KB
Sample230222-tc428acd94
SHA256 65f43065cbe4c067746cdb85b082a6166d32559bd5fe397b6e70dd39fd887c3e
MD5 cf54e75222a80b10a0485243a3fa1863
SHA1 b100a2b686b9ff2fd065a1c366fb0d83826af1fa
SHA512 21914d084f15ed0d0214dc8119f9891b1e09220d325359eb2fc583df79f00ef4201b33a929f67164f4e8cc73d96bd820b135c6be3cb1ed7fc0e522f546e21a76
SSDEEP 12288:4rNxV/xG39fx1jGrJySlVB7qZcsyc1m41OSoMMxM6/+Hmmn:YxRQfXsy0BTP4gSoMMxRs
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

522381.dat

.dll 904KB

522381.dat

SHA256 65f43065cbe4c067746cdb85b082a6166d32559bd5fe397b6e70dd39fd887c3e
MD5 cf54e75222a80b10a0485243a3fa1863
SHA1 b100a2b686b9ff2fd065a1c366fb0d83826af1fa
SHA512 21914d084f15ed0d0214dc8119f9891b1e09220d325359eb2fc583df79f00ef4201b33a929f67164f4e8cc73d96bd820b135c6be3cb1ed7fc0e522f546e21a76
SSDEEP 12288:4rNxV/xG39fx1jGrJySlVB7qZcsyc1m41OSoMMxM6/+Hmmn:YxRQfXsy0BTP4gSoMMxRs
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Hango_fc_decoder_get_charset Hango_fc_decoder_get_glyph Hango_fc_decoder_get_type Hango_fc_font_create_base_metrics_for_context Hango_fc_font_description_from_pattern Hango_fc_font_get_glyph Hango_fc_font_get_raw_extents Hango_fc_font_get_type Hango_fc_font_get_unknown_glyph Hango_fc_font_has_char Hango_fc_font_kern_glyphs Hango_fc_font_key_get_context_key Hango_fc_font_key_get_matrix Hango_fc_font_key_get_pattern Hango_fc_font_lock_face Hango_fc_font_map_add_decoder_find_func Hango_fc_font_map_cache_clear Hango_fc_font_map_create_context Hango_fc_font_map_find_decoder Hango_fc_font_map_get_type Hango_fc_font_map_shutdown Hango_fc_font_unlock_face Hango_fc_fontset_key_get_absolute_size Hango_fc_fontset_key_get_context_key Hango_fc_fontset_key_get_description Hango_fc_fontset_key_get_language Hango_fc_fontset_key_get_matrix Hango_fc_fontset_key_get_resolution Hango_ft2_font_get_coverage Hango_ft2_font_get_face Hango_ft2_font_get_kerning Hango_ft2_font_get_type Hango_ft2_font_map_create_context Hango_ft2_font_map_for_display Hango_ft2_font_map_get_type Hango_ft2_font_map_new Hango_ft2_font_map_set_default_substitute Hango_ft2_font_map_set_resolution Hango_ft2_font_map_substitute_changed Hango_ft2_get_context Hango_ft2_get_unknown_glyph Hango_ft2_render Hango_ft2_render_layout Hango_ft2_render_layout_line Hango_ft2_render_layout_line_subpixel Hango_ft2_render_layout_subpixel Hango_ft2_render_transformed Hango_ft2_renderer_get_type Hango_ft2_shutdown_display Hango_ot_buffer_add_glyph Hango_ot_buffer_clear Hango_ot_buffer_destroy Hango_ot_buffer_get_glyphs Hango_ot_buffer_new Hango_ot_buffer_output Hango_ot_buffer_set_rtl Hango_ot_buffer_set_zero_width_marks Hango_ot_info_find_feature Hango_ot_info_find_language Hango_ot_info_find_script Hango_ot_info_get Hango_ot_info_get_type Hango_ot_info_list_features Hango_ot_info_list_languages Hango_ot_info_list_scripts Hango_ot_ruleset_add_feature Hango_ot_ruleset_description_copy Hango_ot_ruleset_description_equal Hango_ot_ruleset_description_free Hango_ot_ruleset_description_hash Hango_ot_ruleset_get_feature_count Hango_ot_ruleset_get_for_description Hango_ot_ruleset_get_type Hango_ot_ruleset_maybe_add_feature Hango_ot_ruleset_maybe_add_features Hango_ot_ruleset_new Hango_ot_ruleset_new_for Hango_ot_ruleset_new_from_description Hango_ot_ruleset_position Hango_ot_ruleset_substitute Hango_ot_tag_from_language Hango_ot_tag_from_script Hango_ot_tag_to_language N115

Name

.text

Size

131KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/61

Size

255KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/73

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/87

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/99

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/123

Size

141KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/134

Size

160KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ