5526d4031a425b438fcc8a746b16f6c5c183fc6bc6f631aadf6c0377c26bf103 | Triage

Sharing

General

Target

5526d4031a425b438fcc8a746b16f6c5c183fc6bc6f631aadf6c0377c26bf103
Size

161KB
MD5

ae1ccc3670495bca9fefab24b44a27a2
SHA1

bb0c0e5f84983da50ac7d9cec1330abd8948c47a
SHA256

5526d4031a425b438fcc8a746b16f6c5c183fc6bc6f631aadf6c0377c26bf103
SHA512

57a7b0b0281af0f00c3fbce77f2095575d5a5f79a33bccf29d169658a9aff968ad7e76ac1f22e4d69acba718fddda95dceab86f703a338f807b9632199c8a2ef
SSDEEP

3072:C1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:EnS62Fl+pkeJl3CvRStrFl+EYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5526d4031a425b438fcc8a746b16f6c5c183fc6bc6f631aadf6c0377c26bf103

Files

5526d4031a425b438fcc8a746b16f6c5c183fc6bc6f631aadf6c0377c26bf103
.dll windows:5 windows x86 arch:x86

7b12f79fcc0e8385730e3498b17dbc72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey

user32

TranslateMessage

clusapi

ClusterEnum

rasapi32

RasGetConnectionStatistics

kernel32

LoadLibraryExW
CloseHandle
GetModuleHandleW
OutputDebugStringA
OpenSemaphoreW
LoadLibraryW
GetProfileSectionW
GetProfileSectionA

opengl32

glTexSubImage1D

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Exports

Exports

RtplDtpmimr67

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ