0fded15f9a22bd7d6534eca7df90bf8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fded15f9a22bd7d6534eca7df90bf8e
Size

10KB
MD5

0fded15f9a22bd7d6534eca7df90bf8e
SHA1

8b2fad857d60fbe613e256081c585939b7216565
SHA256

c26d67ca3f0d101f1502a2d61094a1d94ea8f4f6a5dc6ff806b2721e4137a41b
SHA512

f0f7dfcbd2b236160f6e69d5d4e231978884676ea256380f773e6ce078715683b30af6ac617fc38d2e25b7bacdf3e98de03daf71935aa1dec3e59284fadd058a
SSDEEP

96:oEGADJW/Vp0PepbmdqewAvyCNLszmqjLLSTK2ulLyKy9KwJUFnSGQY5JkFWOJ+fE:vGADsbm1gCxqb9LyKWU9QYLpRB/yq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fded15f9a22bd7d6534eca7df90bf8e

Files

0fded15f9a22bd7d6534eca7df90bf8e
.dll windows:4 windows x86 arch:x86

538e4be91224615c563f388c4079a1da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection

user32

InvalidateRect
MessageBeep
FlashWindow
DestroyAcceleratorTable
DestroyIcon
TranslateAcceleratorA
IsDialogMessageA
LoadAcceleratorsA
LoadImageA
GetSystemMetrics
SendMessageA

comctl32

ImageList_LoadImageA
ImageList_Destroy

Exports

Exports

DelPlugin
InitPlugin
PlugVer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ