12813481c17d6faace6fc50eff10e311 | Triage

Sharing

General

Target

12813481c17d6faace6fc50eff10e311
Size

118KB
MD5

12813481c17d6faace6fc50eff10e311
SHA1

b57e6b6800bf885d09913ba240eb395775f6ce36
SHA256

f0fa9a410f6f2f1ca06612d8c19b9491b5d645826dd802603ffa9bea0478609f
SHA512

7d8c45cbf3b8ca5c10d6c4b3cfde5692b8760b48b9015aa65db1079fbac443f71e28a4bf211d26077af55849b6bed59572f73fb92643eb8981b948b33dc7c7b3
SSDEEP

3072:CLK0nNfFAFYPt439xqJjXKhvJPSIAE/ef8N5w4+qEV31xCQ+:WnNfF6YV43LqNadJP1tAEHBErxCQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12813481c17d6faace6fc50eff10e311

Files

12813481c17d6faace6fc50eff10e311
.dll regsvr32 windows:4 windows x86 arch:x86

21392eb9068d8b1650380b647bb49bde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegQueryValueExA

shlwapi

StrRChrA

urlmon

URLDownloadToCacheFileA

rpcrt4

RpcStringFreeA

user32

EnumThreadWindows

oleaut32

VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE