75c3e448c9aba9e8d1d768f6b2eacb30N | Triage

Sharing

General

Target

75c3e448c9aba9e8d1d768f6b2eacb30N
Size

257KB
MD5

75c3e448c9aba9e8d1d768f6b2eacb30
SHA1

0182c411b8bb5b8f5583d16449327bfe65de7a22
SHA256

54baa5b7116e0507e87742f60a537791047db51fd7802480d6de585f38091e54
SHA512

c14d223a45d35323d91aac1fcdd7cb213a3149fe720d4194ce4d8cfc2ef2a47f7de1e6b778fd0c7113ba09edae29bd295d5ac3e178c48775bd87b16ef1e07e7b
SSDEEP

6144:y42IfzNPnoeY8j3AsHGPXpHNj6rByM3NCZY:yHuoeY8j3IPXpHQNCZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c3e448c9aba9e8d1d768f6b2eacb30N

Files

75c3e448c9aba9e8d1d768f6b2eacb30N
.dll windows:5 windows x86 arch:x86

b84fd50f2389cfd5bd83e2cf062986d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fffp4.pdb

Imports

kernel32

CloseHandle
OpenSemaphoreW
LoadLibraryExA
GetModuleHandleW
OutputDebugStringA
GetProfileSectionW

opengl32

glTexSubImage1D

ole32

CreateStreamOnHGlobal

user32

TranslateMessage

advapi32

RegLoadAppKeyW

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ