abe5ec624123cec3745308d9b67006da | Triage

Sharing

General

Target

abe5ec624123cec3745308d9b67006da
Size

77KB
MD5

abe5ec624123cec3745308d9b67006da
SHA1

d4f1907d4be2a331b6ba5197922794506c80a1ec
SHA256

dcdd6c4a4f090a3661e111354cb75abb61e6923f2ff5b7eb7ddfc3dff1064712
SHA512

1ac58884a73f34b31783ff0c9c13cf150d99a08599f4cdb7148ecbf8f486308db994c72e15c7ad164e471cd3a2a547dbdd1cd902a4e2f6de40627df61ae5c050
SSDEEP

1536:v3GaKkgLPDCjr5c3CHvsZHlyH0Jf2Y2HFBQ7+zJDr9T9rqj5k3onwRNus6:vNKkg74r5cis3Jf2YYF5JvNE9k3Pus6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abe5ec624123cec3745308d9b67006da

Files

abe5ec624123cec3745308d9b67006da
.dll windows:4 windows x86 arch:x86

dd932b1a8f5caa7c6742dce50c0a7c23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

wininet

InternetSetOptionA

Exports

Exports

CPlApplet

Sections

.text
Size: 69KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE