5fb4fee903f74108561ebf72312a7154456c96f6011932dfed1b70f0f791e199 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fb4fee903f74108561ebf72312a7154456c96f6011932dfed1b70f0f791e199
Size

47KB
MD5

330cf9da18c0dd79754f3c28d326f830
SHA1

d361a2fc812f500d8ce81190065446d7f344dae4
SHA256

5fb4fee903f74108561ebf72312a7154456c96f6011932dfed1b70f0f791e199
SHA512

017fab5abf87f377e24c87db16e5aae34184c5f7b98eaa3014cdb06346cc26375d31e79067784bfe0c8afb6f71b25afa9126fe2da6e160b7d0b3bb5321502252
SSDEEP

768:tDO6xu9+YlJ3WUa2O2dNm0S0UOUZ07tDiOeujIvZ74Or3Z9XvnIg4XE1dcqU8:46xuHllWUaHIM0LVIIDzeuI4Or3Z9vn9

Score

N/A

Malware Config

Signatures

Files

5fb4fee903f74108561ebf72312a7154456c96f6011932dfed1b70f0f791e199
.dll regsvr32 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 37KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE