c4058432c66a1b74183085a5d163864f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4058432c66a1b74183085a5d163864f
Size

83KB
MD5

c4058432c66a1b74183085a5d163864f
SHA1

43a7b96113e72ff66db2f827c71062a81473632a
SHA256

758cc8b9d08beaed4f7690ba0008c315d55ab1b72855b76e8c7383926264de4d
SHA512

4d8f140d306ade20466443641f58319d08e321781a4fa66a86185c03c3f3c8a11c4dc9bacf5c4789f936111d0568e84b57b61c9fc71a69484a734c49ae068fb4
SSDEEP

1536:eHUO97Ch2l45gCwrulzkBIrIeDYDrst+tUGz6ghwBDqI:oUvt5gVylxPw68wBDd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4058432c66a1b74183085a5d163864f

Files

c4058432c66a1b74183085a5d163864f
.dll windows:4 windows x86 arch:x86

ebafac331daa78bdbdc501f931a0bde3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

Exports

Exports

CPlApplet

Sections

CODE
Size: 77KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE