d54a39ff77bfe8a8eba951c495544b12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d54a39ff77bfe8a8eba951c495544b12
Size

20KB
MD5

d54a39ff77bfe8a8eba951c495544b12
SHA1

245bc09974fe01b79e87876ee9209babc1487457
SHA256

e37dc6633327f09ee4ab2492c57e0f1e1f91d5f402855075f0b81bd60f625d80
SHA512

133108086390b825fa63661c3b218194ba5f26edcc553a47a2a7787f17decd549ca05be41ab04136e021fd5aae87d767a1948569cfa73cf1da88087bfca9e0ee
SSDEEP

24:e1GSn3qiyXggKvu6yyN77bV4cv48ng5gM1p0Bi4opf:SEXggKNPvr0gmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54a39ff77bfe8a8eba951c495544b12

Files

d54a39ff77bfe8a8eba951c495544b12
.dll windows:4 windows x86 arch:x86

bc06904cb716f9e708dcaf8e3cc704cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep

user32

SystemParametersInfoA

Exports

Exports

InstallPlugin
PluginVersion
TerminatePlugin

Sections

.text
Size: 4KB - Virtual size: 446B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ