25a5044cd3ed5dbd723a0c84bc86552f | Triage

Sharing

General

Target

25a5044cd3ed5dbd723a0c84bc86552f
Size

42KB
MD5

25a5044cd3ed5dbd723a0c84bc86552f
SHA1

456f460dc0b9ece1bf750c90e64085a3ecbf9f72
SHA256

5d4f886a059c90e417cc57f982ccb47587df04ccf6a32fdbb84fa244925934af
SHA512

79d18b0bb68a922070ced95a6b401412a242dad65137e5fdd48adac63c92a91e578498aeae4a0809acacfbee5d4627ce667d63edb452eaa471a4c3f902e46f37
SSDEEP

768:GmhKbHe3O+VG1OSLxjhHsCX8KirUjkaTCmfD8Fyc3tSD:vKePVE9xJ9hG0bZfyy0tG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25a5044cd3ed5dbd723a0c84bc86552f

Files

25a5044cd3ed5dbd723a0c84bc86552f
.dll windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE