AlphaBlend
GradientFill
TransparentBlt
TransparentBltEx
Static task
static1
1 signatures
General
-
Target
msimg32.dll
-
Size
118KB
-
MD5
c72acd9309f66f7014db54fa5cc3757d
-
SHA1
d6731fc0768c9c194d710f99b313aa275927de52
-
SHA256
cc4c6d288d43f85e0507970c12aee228b65b7937c22846357e7af5bad507e327
-
SHA512
b0fc7ce568e856d932f05a25a2f62926cf8dc023492c6dfde906cfa5c34199fd404116162eb562f9d09a952f6e81c7da7cf40bed8b81cbef4bf10ccd351c873d
-
SSDEEP
1536:rXvCIKV+TgsrgvKOesxq0XH9ejYY39kJpfhPpH00srC3lnW8RTruKdSkGK3aymrn:r/CIKGgEYeYq0XFY3Q5DHrVwM+1aYIO
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource msimg32.dll
Files
-
msimg32.dll.dll windows x86
1e091365d527ad7a76519f8bb137ba20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
VirtualFree
VirtualAlloc
LoadLibraryA
HeapAlloc
RtlMoveMemory
GetProcAddress
GetProcessHeap
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
GetSystemDirectoryW
DisableThreadLibraryCalls
LockResource
LoadLibraryW
LoadResource
FindResourceW
ExitProcess
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetUnhandledExceptionFilter
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
msvcrt
_amsg_exit
_initterm
free
_XcptFilter
wcsrchr
_except_handler4_common
malloc
memcpy
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ