d437ac3af72511926bb0e18a92d4464f76cc150a309f5e139a88603f3c542b96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d437ac3af72511926bb0e18a92d4464f76cc150a309f5e139a88603f3c542b96
Size

32KB
MD5

baa878bc66c5e5fe7d2fd4409bbce512
SHA1

99f48261435e2661e26e79bb4723e2458dbd1d95
SHA256

d437ac3af72511926bb0e18a92d4464f76cc150a309f5e139a88603f3c542b96
SHA512

78adb5d5c8e77d90f6e3bcbf9a530fbc6bd9158241d40b23a205dd7a5742e3215c430dbae47c0202bb5f35ac3cfc84dc6260fd50f325c11ec0d229fef4d7cee0
SSDEEP

768:nofqdJS/bSon6qDQirTu3r/an28q3n+FZw:noSdJS/WO6mrTu3zan28qX0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d437ac3af72511926bb0e18a92d4464f76cc150a309f5e139a88603f3c542b96

Files

d437ac3af72511926bb0e18a92d4464f76cc150a309f5e139a88603f3c542b96
.dll windows x86

cb53decdc673a51e707e7e45740950bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetCapture

comdlg32

GetOpenFileNameA

ole32

CoUninitialize

dinput8

DirectInput8Create

comctl32

PropertySheetA

msvcrt

__dllonexit

Exports

Exports

PADabout
PADclose
PADconfigure
PADinit
PADkeyEvent
PADopen
PADpoll
PADquery
PADreadPort1
PADreadPort2
PADshutdown
PADstartPoll
PADtest
PS2EgetLibName
PS2EgetLibType
PS2EgetLibVersion2
PSEgetLibName
PSEgetLibType
PSEgetLibVersion

Sections

.text
Size: 25KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE