2ca4e0f7fca0f275b438f6461a030541 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ca4e0f7fca0f275b438f6461a030541
Size

174KB
MD5

2ca4e0f7fca0f275b438f6461a030541
SHA1

1785630716210494df343e90e1773d7dbaa037c2
SHA256

1c9dc57cc52e06e8f7ba9d2d4890bbdc2fdc5fdea3123bf0aad7a6e17bba6b35
SHA512

155b4fa2b3746f0d626fab9a48232554778b55510235d42d5fd2dfa15b4756152f91f2da615a6393c8c8e5ff6e8a9345de74bd43625ccb0afed5805c6c3e7467
SSDEEP

3072:bCGv478etxhzY1HbCaCBSdYl5M7RclibX+2ROziAJWDo/5AFJu:b4YgwHbCa4SOqW49ObJYCCFJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca4e0f7fca0f275b438f6461a030541

Files

2ca4e0f7fca0f275b438f6461a030541
.dll regsvr32 windows:4 windows x86 arch:x86

c5b4d5b539b3b689e36506b56eb5c2ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

OpenServiceA

shell32

SHGetFileInfoA

ole32

CoCreateInstance

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 50KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE