5314afe63948a8941d3eaac42774f86e7c57a36fe3afa86c737326f30648a512N

General

Target

5314afe63948a8941d3eaac42774f86e7c57a36fe3afa86c737326f30648a512N
Size

57KB
MD5

12120a8434bc227af2b5226bf3585f70
SHA1

73a764ef6f1b454a94b56f02d338a3993ea9a61b
SHA256

5314afe63948a8941d3eaac42774f86e7c57a36fe3afa86c737326f30648a512
SHA512

69725dd66c97ff2db7acdb84d97052159a1e74a06153b05407960be6aea375b07557f188e9613bb0f400950ce9b4ba58ef44be33d9aacf65a6219f0e8c3ec146
SSDEEP

1536:27epQq1DjMYWX4dcpyh2WMmDmGRGnKLtFEu1STzkB:27IQq1sd4dcu2WJ3LtFEoSTzkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5314afe63948a8941d3eaac42774f86e7c57a36fe3afa86c737326f30648a512N

Files

5314afe63948a8941d3eaac42774f86e7c57a36fe3afa86c737326f30648a512N
.dll windows:4 windows x86 arch:x86

5752c80050ee659f9229b35b7d160241

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\ccViews\autobuild1_BR-1102-06XY_14.42_Snapshot\gfx_Development\dump32\igfx\xp\gtune\rotation\igxprd32.pdb

Imports

win32k.sys

EngAcquireSemaphore
EngReleaseSemaphore
EngStretchBlt
EngFreeMem
EngDeviceIoControl
EngAllocMem
EngPlgBlt
EngDeleteSurface
EngLockSurface
EngUnlockSurface
EngFindImageProcAddress
EngLoadImage
EngMultiByteToUnicodeN
EngModifySurface
EngCreateDeviceSurface
EngCreateDeviceBitmap
EngCreateBitmap
EngUnloadImage
EngDeleteClip
EngCreateClip
CLIPOBJ_bEnum
CLIPOBJ_cEnumStart
EngDebugPrint
PATHOBJ_vGetBounds
STROBJ_bEnum

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5752c80050ee659f9229b35b7d160241

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

win32k.sys

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 9KB - Virtual size: 10KB

INIT Size: 1024B - Virtual size: 634B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 9KB - Virtual size: 10KB

INIT
Size: 1024B - Virtual size: 634B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB