d0bd8afa82a074da975c72feba3708e9d1682c84f5a84e61bc9dd62acb330de9 | Triage

Sharing

General

Target

d0bd8afa82a074da975c72feba3708e9d1682c84f5a84e61bc9dd62acb330de9
Size

161KB
MD5

4f18acc61b4ccfccc3cbee79fd3d93c0
SHA1

f49ba34a717754af6614a472e85b82c99caeaf26
SHA256

d0bd8afa82a074da975c72feba3708e9d1682c84f5a84e61bc9dd62acb330de9
SHA512

2514da00bf946ed29ee867f3b14fba28a364ef7f85e48611853b70721a37f30f4727659352d13991463fce536c8c29c98b1aa258984bcb18d1953afd0753e8ee
SSDEEP

3072:uaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:rnS62Fl+pkeJl3CvRStrFl+EYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bd8afa82a074da975c72feba3708e9d1682c84f5a84e61bc9dd62acb330de9

Files

d0bd8afa82a074da975c72feba3708e9d1682c84f5a84e61bc9dd62acb330de9
.dll windows:5 windows x86 arch:x86

7b12f79fcc0e8385730e3498b17dbc72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey

user32

TranslateMessage

clusapi

ClusterEnum

rasapi32

RasGetConnectionStatistics

kernel32

LoadLibraryExW
CloseHandle
GetModuleHandleW
OutputDebugStringA
OpenSemaphoreW
LoadLibraryW
GetProfileSectionW
GetProfileSectionA

opengl32

glTexSubImage1D

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Exports

Exports

RtplDtpmimr67

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ