2d3e268fee11cb72ba5b3d08ffccd8c4e720276f52e189435d70e0ee672ed6c7 | Triage

Sharing

General

Target

2d3e268fee11cb72ba5b3d08ffccd8c4e720276f52e189435d70e0ee672ed6c7
Size

4.8MB
MD5

3247c531228e0de651ddd0ac22b0c40a
SHA1

ce7c1a6d85957662281dfb518baac7d136820b1b
SHA256

2d3e268fee11cb72ba5b3d08ffccd8c4e720276f52e189435d70e0ee672ed6c7
SHA512

62bc75aadfaece33d3378a02233216f6efedbf42496f5232b3b382ac06ee69236028cf08f2233345c41a2f6ef1845fd79d84fbd0c058940e74d01b3455566927
SSDEEP

24576:ZrlMFVrY7XFpLMojhw+NOMa0/rpCs25rIc/PL74B/ghq9JkeRqUV:ZuFwDR++NbF/rp6/z741ghfeRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3e268fee11cb72ba5b3d08ffccd8c4e720276f52e189435d70e0ee672ed6c7

Files

2d3e268fee11cb72ba5b3d08ffccd8c4e720276f52e189435d70e0ee672ed6c7
.dll windows:5 windows x86 arch:x86

be958df14e341711b02e0988d11b2523

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32 kernel32

GetSysColor RL

Exports

Exports

displayName
handlesMultiStateDots
loadVariableList
processLine
propertiesWindow
setColorPath
setLightInkWeight
setPositive
setStates

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 913KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ