df1290434fcb7ee8812178e6b147ff73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df1290434fcb7ee8812178e6b147ff73
Size

21KB
MD5

df1290434fcb7ee8812178e6b147ff73
SHA1

5c98023f92536ee9cd737c34cc5b3f790d94a214
SHA256

cc704bb64c16a08014e78e96db1eace68050a99149eedbeba0d606990e6bf149
SHA512

4011f52d2dfee8d6851f978057900ed43d277539e2e37f81ea9a66f904859a0b529a0b5fefea5fdc6133ddf855a37779fd528e52983dc86341504bf9129ba356
SSDEEP

192:3cWezKqenctnP5LTjfjn3SI/7ax5QO71w5xkD8i+AtGYphBbN9aG+JZO8DW7+Vf8:3gQEP5LHfL3yV1wmX+AtPvNEC8aiUYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1290434fcb7ee8812178e6b147ff73

Files

df1290434fcb7ee8812178e6b147ff73
.dll windows:4 windows x86 arch:x86

175240d5fdabc9e8b77c36cf8d8f446d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemWindowsDirectoryW
GetLastError

user32

CreateMDIWindowA

Sections

.text
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xbvn
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE