UtilitiesLg[.]dll | Triage

Sharing

General

Target

UtilitiesLg.dll
Size

786KB
MD5

8780a69c1a7546cd699053bcff898d3f
SHA1

9f76ab927eb06e901bd55f5b46eef0b3e51a0d83
SHA256

5ca55d3b27724c4b353a1c5539e4d2b7628d4ebe14c9cf52f8a5d20c7e269a20
SHA512

bd0598e768805bc017a3acc2ce5dac05be367eff7b3e22590d1f6139593327147ad638050b1fb29aef41311ba3387bed002a304be3dacfa4d7b3a02e6aefcbfc
SSDEEP

24576:ZFxaGVJV9zR7A8DDKJFRX+Whr7tIoiCrY6raFcA:jjJjRnDbWZ7I4Ys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UtilitiesLg.dll

Files

UtilitiesLg.dll
.dll windows:4 windows x86 arch:x86

afbc82eea33db1ff062ab6ea47c5237e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CLSIDFromString

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

ReplaceTextA

Exports

Exports

AfishoFormToolsDLL

Sections

.text
Size: 759KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE