7cba3299683ca5282cd3e898e56ca744 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cba3299683ca5282cd3e898e56ca744
Size

17KB
MD5

7cba3299683ca5282cd3e898e56ca744
SHA1

df585c86581b9eadb37c4825e75441f1548221f1
SHA256

593eafb9511059cac76b3ca4b4ad08fddbab202ed5a45fad18f238961c98fe76
SHA512

51cded0ba630d8dcd5386bba43f722b2503fc0493cead0619ada7e6acc601d658f154ea6fa46ce22f3e4e5b093f8066f71aed1bd7b43f2a73f0ecebaab2cc7bb
SSDEEP

192:ZTLYGcH+bKV1/qKjLBPGn4/flmfx7qDLh25r1+oxOAIMHG26bVRhk:hNOTV1CKHZGn4/fg7q83+0iXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cba3299683ca5282cd3e898e56ca744

Files

7cba3299683ca5282cd3e898e56ca744
.dll regsvr32 windows:4 windows x86 arch:x86

4f61a3ca19664c691c18a6790ec106a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

connect

wininet

InternetCrackUrlA

shlwapi

SHSetValueA

urlmon

ObtainUserAgentString

user32

IsWindow

ole32

CoTaskMemFree

oleaut32

VariantClear

atl

ord30

msvcp60

??0Init@ios_base@std@@QAE@XZ

msvcrt

_purecall

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.rdata
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE