2cd519419098bfcc7a4a7af0904ab9a2 | Triage

Sharing

General

Target

2cd519419098bfcc7a4a7af0904ab9a2
Size

129KB
MD5

2cd519419098bfcc7a4a7af0904ab9a2
SHA1

0c71fe128836e52c5fb43261abd0ad0b0a49a45b
SHA256

a6d12093d1d041fc1a528780fc2ed1a02846ff852a68eda2592bbb39f8220dac
SHA512

e371aa082c84f5089de1296f36ad40a60ff7e7c01e113a4658148a6d7bb4cbb7e6238fba2cac28a78f70d92dfb5362f9f36b82ad7accac63f06e67c18ddaeb30
SSDEEP

3072:G10MmiFjCRkPQCJP4jn5feGudwYrsaEL4+rLOUYq96eMhelqezTitiq:gh7FjCRoQCJgjnhkRXOdOm6eMGzTwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd519419098bfcc7a4a7af0904ab9a2

Files

2cd519419098bfcc7a4a7af0904ab9a2
.dll regsvr32 windows:4 windows x86 arch:x86

59bb63af24beb01b5b294c1c6253fcd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord6467

msvcrt

_except_handler3

user32

IsCharAlphaNumericA

advapi32

RegDeleteKeyA

ole32

CoTaskMemFree

oleaut32

VariantClear

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 14KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE