b5afae8fb49cb06bb536350506ab98a758ad5b1c4f358285e366271acf8a6c11 | Triage

Sharing

General

Target

b5afae8fb49cb06bb536350506ab98a758ad5b1c4f358285e366271acf8a6c11
Size

161KB
MD5

210f83f24cf998d19e53f674b3d15143
SHA1

26b8470fa4c920db71ba710da293075dcda3cc38
SHA256

b5afae8fb49cb06bb536350506ab98a758ad5b1c4f358285e366271acf8a6c11
SHA512

a31d6c58d699f8687b4489fbaa3018abe9b759380ee194957b8062f63694938f1f19de70d64b9346bb90d609955e9dba9aa65d66a8c4b666e5da652dc5e428c8
SSDEEP

3072:njSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd28GkFY:jnS62Fl+pkeJl3CvRStrFl+EYN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5afae8fb49cb06bb536350506ab98a758ad5b1c4f358285e366271acf8a6c11

Files

b5afae8fb49cb06bb536350506ab98a758ad5b1c4f358285e366271acf8a6c11
.dll windows:5 windows x86 arch:x86

7b12f79fcc0e8385730e3498b17dbc72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey

user32

TranslateMessage

clusapi

ClusterEnum

rasapi32

RasGetConnectionStatistics

kernel32

LoadLibraryExW
CloseHandle
GetModuleHandleW
OutputDebugStringA
OpenSemaphoreW
LoadLibraryW
GetProfileSectionW
GetProfileSectionA

opengl32

glTexSubImage1D

ole32

CreatePointerMoniker
CreateStreamOnHGlobal

Exports

Exports

RtplDtpmimr67

Sections

.text
Size: 141KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ