2f4f0fcb1d4b3283f31975557cd6175e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f4f0fcb1d4b3283f31975557cd6175e
Size

24KB
MD5

2f4f0fcb1d4b3283f31975557cd6175e
SHA1

f27d755c73fbc76f903f2dd24c0dc775153ca876
SHA256

e7135c000d3654e12e7613af14b67dfc01722ecf8e1275938fe4fe7c43c709ec
SHA512

3528496ef5878fbb3d2750ad87089611e154c0cd4fed0207334bbd80ddac62289457d9b42a11f647ed613b6c07acf6a74cdc79402244c6dedbfc2f91fbd4e7b8
SSDEEP

192:kG8ZLEJ/r7vzKzhWIwKse1Yy8r2KA81nwjo+6/JdkdmZA/2O8Z:kG8ZLC7vzKzh4KsyYjMURSd/2O8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f4f0fcb1d4b3283f31975557cd6175e

Files

2f4f0fcb1d4b3283f31975557cd6175e
.dll windows:4 windows x86 arch:x86

42a0392b870c8329b864e3d1a75d0701

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
FormatMessageA
GetWindowsDirectoryA
CreateProcessA

user32

LoadStringA
MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

msvcrt

malloc
_adjust_fdiv
free
memset
sprintf
strrchr
strcat
_initterm

Exports

Exports

CPlApplet
DllMain

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 829B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ