53713cd6b48a841fae440bbd1792f895 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53713cd6b48a841fae440bbd1792f895
Size

65KB
MD5

53713cd6b48a841fae440bbd1792f895
SHA1

b6a8c7f541ef825745972da34c3fe5902520578e
SHA256

c1becb2392c474041196dfb19d3226d4b0734afbaab2a95395f7937766aca688
SHA512

13a1708f4458c0f7096af30fd89c0148f05b08b9eb03d03a252f7c252d328cd78d13e481cede9cc516c35ed7e65c206e49c8a291c8aee3b1303a1bbb4d19b68c
SSDEEP

1536:+pwggO9FbGYwrix7PkGkY1qYxQ2I/IyBZ2KCyL1PDKpD6Ooq:SwggyCux7cmxxI/IyBz1QD6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53713cd6b48a841fae440bbd1792f895

Files

53713cd6b48a841fae440bbd1792f895
.dll regsvr32 windows:4 windows x86 arch:x86

2e10f0dba292d7290388dda82698ee4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostname

wininet

HttpSendRequestA

user32

MessageBoxA

gdi32

CreateCompatibleDC

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysStringByteLen

gdiplus

GdipSaveImageToFile

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 58KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE