5ada260ab6391517dff8303532c53feb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ada260ab6391517dff8303532c53feb
Size

55KB
MD5

5ada260ab6391517dff8303532c53feb
SHA1

578b7968f721779ec1eacba63245eb9c574e498f
SHA256

e02b4b99ee777c581e4f4e4b74896dc158134693a48e7104f3b0da3844c8a3a8
SHA512

0bb6aea917273902a4e47567b62c78a749d48151fec8d956029bd2baad41f597a45c0e4b80e5ae0dfd2e9226c1cd64cc684c6f7fdd7edfd61450ea8962bd584c
SSDEEP

1536:P5Ujt1ffTygh/l+0/jOF/bvYwVEHOv7sU1EeGKk+GQFao:mje8/4gOE4sdMRGQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ada260ab6391517dff8303532c53feb

Files

5ada260ab6391517dff8303532c53feb
.dll regsvr32 windows:4 windows x86 arch:x86

7553eacac4bd3969b546e50e76393a8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

gdi32

GetTextCharsetInfo

advapi32

CloseServiceHandle

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE