3656cab1925514605db4e1356ffda68da992b7044776b51f91d0884dfd4967b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3656cab1925514605db4e1356ffda68da992b7044776b51f91d0884dfd4967b3
Size

104KB
MD5

1310d8a2d82207b5d75a9294277a0e00
SHA1

6622daad65c53c572a57ad379650a793c75d565a
SHA256

3656cab1925514605db4e1356ffda68da992b7044776b51f91d0884dfd4967b3
SHA512

5748a6c59a5e01d4920166daaf5528d6e0bfd212df50e58da8309f8844bbce99d6d3904023f954c32974550fa1b2a65beb4fcfc226c59cccc49246ffe9411efe
SSDEEP

1536:aiMo6GvOg+myx+MYEuHg2mQSyY28wO2zsCUbu3nMBOSSCXNkMRSOgvTBDqKJ:aiPTb0OLmQSRjwOeEu3mOSSeHzgvoK

Score

N/A

Malware Config

Signatures

Files

3656cab1925514605db4e1356ffda68da992b7044776b51f91d0884dfd4967b3
.dll regsvr32 windows x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ