72f57b040d6f523afee40159a743b1ecae685a5bf939cab06b78d1fc397ec5e7 | Triage

Sharing

General

Target

72f57b040d6f523afee40159a743b1ecae685a5bf939cab06b78d1fc397ec5e7
Size

8KB
MD5

5cef1e147509f5c717258df1bc6d99e4
SHA1

61fb8e082b0ccfc7ab2d101ba9e9b82db86d07f8
SHA256

72f57b040d6f523afee40159a743b1ecae685a5bf939cab06b78d1fc397ec5e7
SHA512

094bdea2f30488dfade80832a968a5b538120453bd24caf8f1151f4cf21ca4ddd036679c5f2cb5f6ff946fa297cd1011e5a1b9f9939c96adef940f11ca290782
SSDEEP

192:FCDNfh1GW33ZmWSHSmYb+0prLFgT8yn3qhj:2nGW33+HSmt09Fg1qhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f57b040d6f523afee40159a743b1ecae685a5bf939cab06b78d1fc397ec5e7

Files

72f57b040d6f523afee40159a743b1ecae685a5bf939cab06b78d1fc397ec5e7
.dll windows:1 windows x86 arch:x86

b30abde1a2903e1fedcf36eca50dd7b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CommConfigDialogA
SetConsoleInputExeNameA
CopyFileW
AssignProcessToJobObject
BeginUpdateResourceW
FreeLibraryAndExitThread

gdi32

GetWorldTransform
ExtTextOutW

user32

ReleaseCapture
IMPQueryIMEA

Exports

Exports

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 65B

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ