zMj3IijC[.]d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

zMj3IijC.d
Size

1.2MB
MD5

c3043b9343eb77146eb6078c03e3ca06
SHA1

552e419e3181c195a6c2a35526493c8a48b93950
SHA256

bfda18816e6bafcbfd0862f839341c8ff8645802ec6b39b851a1bedbd0758caf
SHA512

caf95c5856fa80707a1a43da2563e71d93456401f0e0ef07c73e50d16ca6f1dd8e59d8a2058f36672c8da38bcac1f3d1c7d2b8282dfc03fe9045195cc596b799
SSDEEP

24576:/YDwzI0dH+r8xZnRzLxzsSRdMIrV4BSJpqRj0rv2+8+cakiay:uwzIX8xZzz9RdMG4BC00r+ri9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zMj3IijC.d

Files

zMj3IijC.d
.dll windows x86

6c269d0910f1e6a761782a115478cb51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardListCardsA

user32

CreateAcceleratorTableA
CountClipboardFormats

kernel32

GetModuleFileNameW
GetBinaryTypeW
OutputDebugStringA
GetProcessHeap
WaitForSingleObjectEx

gdi32

EnumFontFamiliesExA

ws2_32

select

msacm32

acmFormatChooseW

advapi32

CryptGetKeyParam
RegOpenKeyW

lz32

LZSeek
LZCopy

imm32

ImmCreateContext

Sections

.text
Size: 948KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ