66d1343316b93da4d9dbbf926159738d | Triage

Sharing

General

Target

66d1343316b93da4d9dbbf926159738d
Size

16KB
MD5

66d1343316b93da4d9dbbf926159738d
SHA1

42e77c7c229713725f371159668b48ccacf93932
SHA256

f0142a7c00696e5aa94b639920cb3b9e3118ca590f7f27301c0f3337cb66a3d6
SHA512

a0455d635362adcbd42f6f1e6d6fbfa2e1a8ab7af3a2a2638b9caec800f43058a263e209e54e36e7d283dc1e760904eab924f21b53760151a262df10985df85f
SSDEEP

384:/mMi1jdAR0XnyErvMNV3FiP+qqNdKD8xNgbpD:O5D7P+qqugxNQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66d1343316b93da4d9dbbf926159738d

Files

66d1343316b93da4d9dbbf926159738d
.dll regsvr32 windows:5 windows x86 arch:x86

042374f5bf3104a5d0b38b5ac2a4ef38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW
StrStrIW

oleaut32

SysFreeString
SysAllocStringLen
VariantInit
SysAllocString

ole32

CoInitializeEx

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathW

kernel32

CreateFileW
WriteFile
GetProcessHeap
MultiByteToWideChar
LoadLibraryW
GetSystemTime
GetModuleFileNameW
GetProcAddress
HeapFree
SystemTimeToFileTime
HeapAlloc
CloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ