09e0365324f438aa18e5e9c1cb7886d0N | Triage

Sharing

General

Target

09e0365324f438aa18e5e9c1cb7886d0N
Size

206KB
MD5

09e0365324f438aa18e5e9c1cb7886d0
SHA1

6957e7a009fad9e48a4c7a92623b3dab9d665905
SHA256

75dbb87a82742f09ee7a3530eecb86f6d5344a7350ec9490e28320d6b7f49b1d
SHA512

40f62c6abdcd65fbb2168e37dc2ce628344f5142a7743013986c61038e97e0be9bbbf2093eef11de9deb695c792480e125b08e3702528c12cdecdb7942395d5b
SSDEEP

3072:sopj6gTxmzaCEH8nFb369t9EtpiU7FZEz57GEYd4ntfrOulzQha:zpjtUzy8nF8YN73Ez57Gz4VyWzQo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09e0365324f438aa18e5e9c1cb7886d0N

Files

09e0365324f438aa18e5e9c1cb7886d0N
.dll windows:5 windows x86 arch:x86

97de38df25bb86ed5773a338d673d7ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

TranslateMessage
RegisterDeviceNotificationA

advapi32

RegLoadAppKeyW

kernel32

CloseHandle
OutputDebugStringA
LoadLibraryA
GenerateConsoleCtrlEvent
IsBadStringPtrW

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ