1000155453a972bb6ef38d48300f068e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1000155453a972bb6ef38d48300f068e
Size

177KB
MD5

1000155453a972bb6ef38d48300f068e
SHA1

37da84ec8261a5572301a3d5f3df14228c42bb76
SHA256

8ecf29787a160437d35ada86f0cf3379171104436daee97e15b6ba4ff09c31ce
SHA512

846a4d8f9c70e237bde8136ca112b6f49839467df8534dbe4cfde47f36e3c040f84e116bfe1c15373532d21806d182aff900aeca801c884a29db8b7de1769d8f
SSDEEP

3072:3RMpJ3LsdftmwfvT8DNM/LC6Bsu4uytiE1Y2hQK91rSP4vaSnbkWoWSW:3CL7sXdfvzG6BVywH2h9xO41gQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1000155453a972bb6ef38d48300f068e

Files

1000155453a972bb6ef38d48300f068e
.dll regsvr32 windows:4 windows x86 arch:x86

90b775c48a48323e52fac0928697c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

RegDeleteValueA

shell32

SHGetFileInfoA

ole32

CoGetClassObject

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE