d799480f6a39fa4bdfaa0a366cb9f40d | Triage

Sharing

General

Target

d799480f6a39fa4bdfaa0a366cb9f40d
Size

83KB
MD5

d799480f6a39fa4bdfaa0a366cb9f40d
SHA1

00c028d714712bc902365d739529303966342e04
SHA256

77b16a14310e2eaa1b23fc65243f4e06b1b5c6f2108d393b27777c790c96683b
SHA512

c3f3783939b49fba2826bf5b4f96595f5acfd82c2dde59b41cf5e7092777460de8d4a54056b9fecd81965768410f9ceac8a868020ce0760d0ba980a42af7ec43
SSDEEP

1536:CHUO97Ch2l45gCwrulzkBIrIeDYDrst+tYVueSyLrK4:0Uvt5gVylxNhSyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d799480f6a39fa4bdfaa0a366cb9f40d

Files

d799480f6a39fa4bdfaa0a366cb9f40d
.dll windows:4 windows x86 arch:x86

ebafac331daa78bdbdc501f931a0bde3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

Exports

Exports

CPlApplet

Sections

CODE
Size: 77KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE