1f82e99b8963db7e40478a91bb7893d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f82e99b8963db7e40478a91bb7893d4
Size

44KB
MD5

1f82e99b8963db7e40478a91bb7893d4
SHA1

9b53011d7eabeedbcb156732688275f53a8ab50a
SHA256

9bfd1471513e16f7864dde2fec4fdf26378e86516be4c39d1e805c62c820ed4f
SHA512

2ef42656a33b06cb5ab64a7d7c82eec757b0738cb470cd176804863b6b292c8259dca9f697742a35ca895b7272d62055251e7de4d78fba192a9a93fb6cadde58
SSDEEP

768:ZNzRmDOmnUcTLuP1SOsjLFv5woU8M2hnxByUh8f2znJgrtSGCRdxcI0JPz5vjwfW:3+OmnUWCoOeFiCM2RxEvkQtS5jxcfJLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f82e99b8963db7e40478a91bb7893d4

Files

1f82e99b8963db7e40478a91bb7893d4
.dll windows:4 windows x86 arch:x86

d14a883e337d2eb7a93e7020b4f55320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegOpenKeyA

gdi32

StretchBlt

ole32

CoCreateGuid

oleaut32

VariantClear

rasapi32

RasEnumEntriesA

shlwapi

StrChrA

user32

GetDC

wininet

InternetOpenA

wsock32

WSAStartup

Exports

Exports

DLLGetClassObject
Init
Logon
ch
ss

Sections

.text
Size: 41KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE