73f424a008381de6abb03a9922c72c46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73f424a008381de6abb03a9922c72c46
Size

83KB
MD5

73f424a008381de6abb03a9922c72c46
SHA1

0bff73ecdf6649860a027d277232ce57c282b67f
SHA256

fbfdb44deb6b02ad1e7a89ecd2bab4b3c61b33afdf3f72c3d209d46cfbf21c0d
SHA512

a77a60b97f84352474cd00ff9e474dfbe66428b382264b16fd4ccfe5d7823923006d6ac2004f103ebc9008b171bef778268358c99150848644a2718298dfdd01
SSDEEP

1536:MWq78Hg4y6bQ4Q/fRFLc2m5ZW+qjypIPjfG3npQqv11OPU0O:3y8Hg/68ZLls0XjcILfG3pdWPU0O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73f424a008381de6abb03a9922c72c46

Files

73f424a008381de6abb03a9922c72c46
.dll windows:4 windows x86 arch:x86

dd932b1a8f5caa7c6742dce50c0a7c23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

wininet

InternetSetOptionA

Exports

Exports

CPlApplet

Sections

.text
Size: 71KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE