7272bf7bbd5eb20be011f975a81350cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7272bf7bbd5eb20be011f975a81350cf
Size

24KB
MD5

7272bf7bbd5eb20be011f975a81350cf
SHA1

567ccdd7a4642ea15609d8a1d6b5970a59af567f
SHA256

e522bcdc8dd85af3cea65dc6641ff533e087fbea3aed54d04b6fada4cbefa3ad
SHA512

a9da83278eaf4921b53262fb4f67ca5892e30d98dd73720206706fc234aa065ee652e5917d73bcd040dd013be9606c0948962579d138420caf0ec8e61bf635eb
SSDEEP

96:DjKEEyEELk7fdbNeeeQ5eee/8pWiIJNMKO+2B/o4ryc5:DjhEyEEL2lbBYhwryc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7272bf7bbd5eb20be011f975a81350cf

Files

7272bf7bbd5eb20be011f975a81350cf
.dll windows:4 windows x86 arch:x86

79a0e17084eb2ee5583e74306f6b5204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
GetSystemDirectoryA
GetProcAddress
lstrcatA
VirtualQuery
VirtualProtect
GetModuleHandleA
lstrcmpiA
IsBadReadPtr
GetVersionExA
lstrlenA
GetModuleFileNameA
lstrcpyA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ