0db336cab2ca69d630d6b7676e5eab86252673b1197b34cf4e3351807229f12a

General

Target

0db336cab2ca69d630d6b7676e5eab86252673b1197b34cf4e3351807229f12a
Size

4KB
MD5

5e8c9f85256e83d6042bbbac2905d1f3
SHA1

e4d3b29b69ce6d80bb8d1c6309d1c7ebb12f9942
SHA256

0db336cab2ca69d630d6b7676e5eab86252673b1197b34cf4e3351807229f12a
SHA512

acb680b0ee4f3f3e0ae3d56ef429d648b4874c2e636645959eb858a23e59b89660f4d7d540b5b45522fc4b9f09cb2ef836a52ac50033244b9baafc24bf81e114
SSDEEP

48:ZvtYkuL/JGC/ZSUvKLjUxgF/IUj8WTz2GvLlP9cpbqflxNC8iSwGzSDBAFqoBLzc:Z1RmhJvKsxgNz8VGvvchqaGzuxoZEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db336cab2ca69d630d6b7676e5eab86252673b1197b34cf4e3351807229f12a

Files

0db336cab2ca69d630d6b7676e5eab86252673b1197b34cf4e3351807229f12a
.dll windows:1 windows x86 arch:x86

908d9e548a670d9bdf7b45ebce986795

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

PeekConsoleInputW
TlsFree
WriteProfileStringW
PeekNamedPipe
CreateEventA
UnmapViewOfFile
GetNamedPipeInfo
LocalFlags
GetVolumeInformationW
GetNextVDMCommand
GetTimeFormatA
FindFirstFileA
OpenWaitableTimerW
HeapLock
FlushInstructionCache
GetConsoleFontInfo
SetProcessWorkingSetSize
GetTimeFormatW
lstrcpynW
VirtualUnlock
RegisterWowExec

gdi32

MaskBlt
StrokeAndFillPath
DeleteObject
GdiGetPageHandle
SetTextAlign
CreateMetaFileA
GetTextFaceA
SetArcDirection
IntersectClipRect

user32

DrawStateA
PrivateExtractIconsW
SetWindowContextHelpId
SetWindowPos
DispatchMessageA
GetCursor
LoadMenuA
UnloadKeyboardLayout
OemToCharA
CheckMenuItem
DrawStateW
GetScrollInfo
DefDlgProcW
CharPrevW
FlashWindow
SendMessageCallbackW
BroadcastSystemMessageExA
ChangeMenuA
GetMenuStringW
LoadCursorA

Exports

Exports

CPlApplet

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 65B

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

908d9e548a670d9bdf7b45ebce986795

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

Exports

Exports

Sections

.data Size: 2KB - Virtual size: 2KB

.text Size: - Virtual size: 512B

.edata Size: 512B - Virtual size: 65B

.reloc Size: 512B - Virtual size: 8B

.data
Size: 2KB - Virtual size: 2KB

.text
Size: - Virtual size: 512B

.edata
Size: 512B - Virtual size: 65B

.reloc
Size: 512B - Virtual size: 8B