d5abf1be6f566b8a4fcc4b2f9df21bd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5abf1be6f566b8a4fcc4b2f9df21bd9
Size

3.2MB
MD5

d5abf1be6f566b8a4fcc4b2f9df21bd9
SHA1

c9dc4d38f88a899b3c4a1eb028d2d84926848ff6
SHA256

dee014382e290c31509ffa91456c9df78d73edc6b51af5e0b48a6e9cdc76ebc5
SHA512

621e06add65d8540510031201ff83328b1ab0a61a769ef60aa584f4642ec2b34a4c411b881976fa1d76ab02674e83d74c80d7b8aa4f4a62b9e7f268f8e0b6fd9
SSDEEP

49152:8h5VcFRakvYfJZ4Sj2xVXobT2gtbJrBPx2K1ULPU8y88JWmFZ4s7M03B1Ed6wiW0:ycFyJZPixVWHtb3P4KxIs40R1C6wiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5abf1be6f566b8a4fcc4b2f9df21bd9

Files

d5abf1be6f566b8a4fcc4b2f9df21bd9
.dll windows:6 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

DeleteStatusIcon
GetVietHookDll
InitSharedMem
IsVietnamese
ModifyStatusIcon
MyGetMessageHook_MHS
MyKeyHook_MHS
MyMouseHook_MHS
SetInputMethod
SetKeyMode
SetKeyOptions
SetSwitchKey
SwitchMode

Sections

Size: 383KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ogatoptg
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gczvvhhd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE