14f43a734f7cfd80b5bfb88f22fe4be9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14f43a734f7cfd80b5bfb88f22fe4be9
Size

21KB
MD5

14f43a734f7cfd80b5bfb88f22fe4be9
SHA1

e1d6dbd79218931e33b43620e287e516a5d1bf5f
SHA256

e2de665c09a670177c564fff63700dec2dab4390804b68394282863f0e4fe5eb
SHA512

cccbc7af1c92446a6bab719a01340422da2bba6323b52ab68d6fe6a7f4865e6d34385504148235e3acd3a353002f8907f02af0ef57f9541ee6c4be17ccf1f73e
SSDEEP

384:HdjFdh8b8I2m0zTbzqE4ox7JZe8UptZ6yxE4Y423hbgu1xfsS:HBPh86lT/qE4oxlZcqyA421gk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f43a734f7cfd80b5bfb88f22fe4be9

Files

14f43a734f7cfd80b5bfb88f22fe4be9
.dll regsvr32 windows:4 windows x86 arch:x86

c682483b70b3c7dbf346bc2437de0526

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls

wininet

InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA

Exports

Exports

DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ