0c644fedcb4298b705d24f2dee45dda0ae5dd6322d1607e342bcf1d42b59436c | Triage

Sharing

General

Target

0c644fedcb4298b705d24f2dee45dda0ae5dd6322d1607e342bcf1d42b59436c
Size

4KB
MD5

e9da5c53a8d86b9616c4163423699dbd
SHA1

f5af420de5ae4835a292d262a398342f73a53ef5
SHA256

0c644fedcb4298b705d24f2dee45dda0ae5dd6322d1607e342bcf1d42b59436c
SHA512

551f20013cc817aea85c32b9500af5116b2a2ab431d72bc196b3836d41ded89154382ff39ebf7645a10a4db9b3158694b4f4aee64e14061e351430a97d429f69
SSDEEP

48:ZvtEoU3VSB9qg9+kuhgiYIW9qc0d8YD1IguBApBDZ+c:Z1RUgT9+kuhgPICVO1e+uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c644fedcb4298b705d24f2dee45dda0ae5dd6322d1607e342bcf1d42b59436c

Files

0c644fedcb4298b705d24f2dee45dda0ae5dd6322d1607e342bcf1d42b59436c
.dll windows:1 windows x64 arch:x64

12485974691f12a96df45160341f7289

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

BeginUpdateResourceW
ExitProcess
CompareStringW

gdi32

GetTextCharsetInfo
UpdateICMRegKeyW
StartDocW

oleaut32

VarUI1FromI1
VarR8FromDisp
VarUI8FromR4
VarUI8FromCy
VarBstrFromI8
SafeArrayCreateVector

user32

GetCaretPos
MessageBoxExA
SetWindowWord
SendNotifyMessageA
KillTimer
RemovePropA
DdeCmpStringHandles
GetWindowModuleFileNameW

Exports

Exports

CPlApplet

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 65B

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ