d415289a7db281fb70d4d5143534bf0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d415289a7db281fb70d4d5143534bf0c
Size

100KB
MD5

d415289a7db281fb70d4d5143534bf0c
SHA1

5ea8c3d19bf8f44ed221a7bdec06fc6c11ebf12e
SHA256

53e81a6b7945b9613ea661d505a9cd9c862ecd5faa3e9ef9dd5f1349340014ca
SHA512

e4d939e34dd42f93390641a090deec43ef8daf7572a9c457281a9fdc5bee835c4f0be8cc5168383f3300c21c14ffe445250c99ce20f35b4fc5551c3f12acdf3b
SSDEEP

3072:yJyQisqYO6Nthk4AukFDumWdkWGqzjTA:yJ40lUFSmA1Gqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d415289a7db281fb70d4d5143534bf0c

Files

d415289a7db281fb70d4d5143534bf0c
.dll windows:4 windows x86 arch:x86

f1015a99bc20a3562729eb637c0602ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject

Exports

Exports

czqvmpyoo

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ