4fcb0cdce5076373eb62aa3a15354edae485673536ed014eeaa543117cc8fb7f | Triage

Sharing

General

Target

4fcb0cdce5076373eb62aa3a15354edae485673536ed014eeaa543117cc8fb7f
Size

161KB
MD5

4144e0cd9f2863bba0817ecbcce92638
SHA1

6e0626503faaa3864bc1115b85e8756d12f98ef3
SHA256

4fcb0cdce5076373eb62aa3a15354edae485673536ed014eeaa543117cc8fb7f
SHA512

894a86128721981312264982a997620b70010bf2a55b6a9bfbb08e4fc13c488be50bd9f806a03b1565e42b4b07b5c7334717aa27f915516eb003c12810f9500e
SSDEEP

3072:UZSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd21GkFY:GnS62Fl+pkeJl3CvRStrFl+EY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fcb0cdce5076373eb62aa3a15354edae485673536ed014eeaa543117cc8fb7f

Files

4fcb0cdce5076373eb62aa3a15354edae485673536ed014eeaa543117cc8fb7f
.dll windows:5 windows x86 arch:x86

7b12f79fcc0e8385730e3498b17dbc72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey

user32

TranslateMessage

clusapi

ClusterEnum

rasapi32

RasGetConnectionStatistics

kernel32

LoadLibraryExW
CloseHandle
GetModuleHandleW
OutputDebugStringA
OpenSemaphoreW
LoadLibraryW
GetProfileSectionW
GetProfileSectionA

opengl32

glTexSubImage1D

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Exports

Exports

RtplDtpmimr67

Sections

.text
Size: 141KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ