33957dfe2c2eec8a330cfcf2ec9a7b39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33957dfe2c2eec8a330cfcf2ec9a7b39
Size

102KB
MD5

33957dfe2c2eec8a330cfcf2ec9a7b39
SHA1

6ec0b48be98fedc7a7dbc736265b06ad5eb624d1
SHA256

bdb37a353346739d568dea630d9300d6d8cdb36c1f650921a426c44a135747f7
SHA512

38a114e7f814858f34a4aba3341732af26a605f01f0074601f3392248766f17202977c1468a43d064994cd06481cd9e1289fc7a13eb334f65b33952989a517c6
SSDEEP

1536:4sj4jiOFKukdsrvVxn96Mnf2Uv9eMibOvoDsmt2mcp4BAW2anX12xr6SxcT690MI:4cMi7ukWVx96MnDibO1PmciB5pUHJPW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33957dfe2c2eec8a330cfcf2ec9a7b39

Files

33957dfe2c2eec8a330cfcf2ec9a7b39
.dll regsvr32 windows:4 windows x86 arch:x86

c475b3cd45222834078ff8e8821c49cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupSeek
LoadLibraryExA
GlobalDeleteAtom
GetProcAddress
lstrcmpiA
SetLocaleInfoA

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Ljhcjjk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 98KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ