2e05708358905af391bb9d1da16443c0N | Triage

Sharing

General

Target

2e05708358905af391bb9d1da16443c0N
Size

173KB
MD5

2e05708358905af391bb9d1da16443c0
SHA1

790515fdb92860f7b575ec5e8d434bfceb586e4b
SHA256

9b3af3757bb15b5d83739b5fb2d45e3f36bc8b17f1c19e0367ede4cf381e6ac4
SHA512

fd4e9a1a7d470875f7c9e577ff8a9236e052d995c032fd0dc0a610879f771735720c4476f7c2894c4ca5e2623c54ee72f7e120fb8d927a9917c8d56f8002d19d
SSDEEP

3072:eaI6YY/DDdmhdj+O2WYXwU3qstRty89ksD0qOim1Gz4:eazYY/HO1kPdy8ksDD1mY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2e05708358905af391bb9d1da16443c0N

Files

2e05708358905af391bb9d1da16443c0N
.dll windows:5 windows x86 arch:x86

5594ced7851e7059f91664ceabe2c1e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey

opengl32

glNormal3f

ws2_32

accept
WSASetLastError

ole32

OleSave

setupapi

SetupDiDrawMiniIcon
SetupDiClassGuidsFromNameW

kernel32

DefineDosDeviceA
CloseHandle
GetModuleFileNameA
OutputDebugStringA
WaitNamedPipeW

user32

TranslateMessage
OpenWindowStationA

Exports

Exports

Rpkder336

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ