266d18832a80578bca2952dd429fba17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

266d18832a80578bca2952dd429fba17
Size

95KB
MD5

266d18832a80578bca2952dd429fba17
SHA1

91859b7bbe6457ab1050eaff4d0262535aeb0423
SHA256

3af2209b43fb74fdda9831816cb624f9feab1bc77f9df1a3495d0abc5cd3ae28
SHA512

1d0e5c5e1742a45d9f0b7dce6b375bdea413ee54138d7af4afa840036ac02e132f5e29a2db9ab553c1a4ce6368de509c1a50de22ee840eae4e6b5d09f8ccb696
SSDEEP

1536:pDCPCbd/eB+hchn/5uzLFeORck4T4FbY7DolXPOPGawp3f6j2Erlv6Lt:pDCPHB+un/56ewm4Fb2DotPOPJiP6jBS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
266d18832a80578bca2952dd429fba17

Files

266d18832a80578bca2952dd429fba17
.dll windows:5 windows x86 arch:x86

ae611a56c1352ed7e1e9e0eb15c01d5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetForegroundWindow

ntdll

RtlUnwind

psapi

EnumProcesses

d3dx9_41

D3DXCreateLine

Exports

Exports

Direct3DCreate9

Sections

.text
Size: 88KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE