b72188ba545ad865eb34954afbbdf2c9e8ebc465a87c5122cebb711f41005939 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b72188ba545ad865eb34954afbbdf2c9e8ebc465a87c5122cebb711f41005939
Size

8KB
MD5

44f05f473b7d568be2abd9d498fc10ef
SHA1

e9768aac3c51d92a377d7b91e6863c38ea762680
SHA256

b72188ba545ad865eb34954afbbdf2c9e8ebc465a87c5122cebb711f41005939
SHA512

762a7df6bd148e49938e466afc6e3525a546741eb48cafe87771640d725ef3c115bc6c97f60afa34d403d07993e201d05c16a260c6321abd611533a0939901fd
SSDEEP

96:Z1nDSow+RJicK4+0rPg4JPH/DiYncSj6HGf03UZ50933UR:re+RJdxzgal5g6b093s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b72188ba545ad865eb34954afbbdf2c9e8ebc465a87c5122cebb711f41005939

Files

b72188ba545ad865eb34954afbbdf2c9e8ebc465a87c5122cebb711f41005939
.dll windows:1 windows x64 arch:x64

c2d13ef78d041a4d79e0acfcaa1b6e5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetDiskFreeSpaceW
SetConsoleHardwareState
WritePrivateProfileStructA
CreateFileMappingA
GetConsoleHardwareState
_lclose
LocalSize

gdi32

CreateScalableFontResourceA

oleaut32

VarCyAbs
VarUI4FromI2
SafeArrayLock

user32

CharUpperBuffW
GetWindowInfo
CloseClipboard
MessageBoxW

Exports

Exports

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 65B

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ