d126b0366e7d8fd17e913d496e3be83cc243a0cd8a38e5c2aa355f2116827121N

General

Target

d126b0366e7d8fd17e913d496e3be83cc243a0cd8a38e5c2aa355f2116827121N
Size

24KB
MD5

db351a126299850b2d7761983cc26a10
SHA1

2041ac2d1788cd182e4efde32bb531bd008af22f
SHA256

d126b0366e7d8fd17e913d496e3be83cc243a0cd8a38e5c2aa355f2116827121
SHA512

f26313cd96e0f7b4302ff289c8e6f456be6d56b249a174f5c2c3b737f28f14ca426a9999e660947c62a739fe9483bf4e97cf40622d80f5381b27b81a9d2dd818
SSDEEP

96:Vnd0k/KDmCel+Tz3Ce29IReGbUAbW4D+5WMSNHRuxkIyfgVJAoR:ddZSDmCelmrCF6eGH64wRyxKKoR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d126b0366e7d8fd17e913d496e3be83cc243a0cd8a38e5c2aa355f2116827121N

Files

d126b0366e7d8fd17e913d496e3be83cc243a0cd8a38e5c2aa355f2116827121N
.dll windows:4 windows x86 arch:x86

1ef7b1244d6aa30711e55f8144e294af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crlutl110

_CgiMoveTo@16
_CgiLineTo@12

cdrcore110

?OBJCreateGroupObject@@YAPAVWNodeHandle@@PAVCDrawlibDoc@@PAV1@@Z
?USDSetStaticID@@YAHPAVCDrawlibDoc@@PAVWNodeHandle@@I@Z
?RecordRectangle@@YAPAVWNodeHandle@@PAVCDrawlibDoc@@HHHHHHHHHPAV1@@Z
?UnPickAllEntities@@YAXPAVCDrawlibDoc@@@Z
?CreateDisplay@@YAPAUHMEM__@@PAVCDrawlibDoc@@PAVWNodeHandle@@@Z
?DRAWGetAppInterface@@YAPAUIDrawAppComponent@@XZ

mfc42

ord825
ord823
ord1575
ord269
ord826
ord1182
ord342
ord1168
ord1577
ord600
ord1197
ord1570
ord1243
ord1116
ord1176
ord1255
ord6467
ord1578
ord1253

msvcrt

__CxxFrameHandler
??1type_info@@UAE@XZ
_onexit
free
_initterm
_adjust_fdiv
malloc
__dllonexit

kernel32

LocalAlloc
LocalFree

Exports

Exports

?GBDrawGridBoxes@@YGXPAUtagCGIDC@@JJJJ@Z
?TPMGetPropGraphPaper@@YGXPAVWPropGraphPaper@@@Z
?TPMSetPropGraphPaper@@YGXABVWPropGraphPaper@@@Z
GBRecordGridBoxes

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ef7b1244d6aa30711e55f8144e294af

Headers

File Characteristics

Imports

crlutl110

cdrcore110

mfc42

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 4KB - Virtual size: 334B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 4KB - Virtual size: 334B