415e52cf0b7fa572523ff76b06a56aac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

415e52cf0b7fa572523ff76b06a56aac
Size

111KB
MD5

415e52cf0b7fa572523ff76b06a56aac
SHA1

cad356284c02e3b71ebf6ee8fdadd789ac26d9c6
SHA256

39b203ccf5dbc2370e553fadc75fdafe3987ceca8b1dc5b29a781ef61cbd73cc
SHA512

db3c8bef71a09c8cf76e25cbcf084ae0eb69ed1b9f590fbfafe9ee47dd6a8b4727f8e087686c9316e2f14de4cf16b54457c288575381a2f5aa99dd92b7da5352
SSDEEP

1536:A+PK5q3BD586XlSc0NCvY1W50tbvUsc8toCsTDImJxwp3ED6HqBjaHm/2YFrHjFI:AqAq3dcnb8x8t7lmH83ED6HOmGVF7jjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
415e52cf0b7fa572523ff76b06a56aac

Files

415e52cf0b7fa572523ff76b06a56aac
.dll regsvr32 windows:4 windows x86 arch:x86

3ff1f08911549d2356b3a180b889e815

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

OpenServiceW

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE