d3d9214c17e95cdba02b3cb707dd7f4d | Triage

Sharing

General

Target

d3d9214c17e95cdba02b3cb707dd7f4d
Size

76KB
MD5

d3d9214c17e95cdba02b3cb707dd7f4d
SHA1

a4dfb00817aacf99ef51e662498bc724314169cb
SHA256

f9e4eb71e118fd701e679abb4e1598640e86dd6c12c8d12817d194946e5c61ca
SHA512

361123f5ae2e16e3fb7ceecfbecc420ebc4abb5ca7cb200e14d1116f78017e3031aaaf1738ffcc689e02e3968e9e3311a3f44514231d2fe679077eaa36b27752
SSDEEP

1536:yHxd0pjrcfkEwg0jzcb8wBVefl7M38CsJ4OF:oxd0+fCg0jQ7ZOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d9214c17e95cdba02b3cb707dd7f4d

Files

d3d9214c17e95cdba02b3cb707dd7f4d
.dll windows:4 windows x86 arch:x86

935663f89c56437ec6fcebab9d405fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
ExitThread
HeapAlloc
GetProcessHeap
HeapFree
EnumDateFormatsExA
ReplaceFileW

Exports

Exports

csvdk

Sections

.code_01
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ