ff05228ba4098a1b788d1695dd21ff23 | Triage

Sharing

General

Target

ff05228ba4098a1b788d1695dd21ff23
Size

1.3MB
MD5

ff05228ba4098a1b788d1695dd21ff23
SHA1

e879dce04d5e159c129b09727d93304e141d686d
SHA256

20c56bd24cac0a6acfe0134663240e0e779b7c97a19bd441cb11c3a9ba072365
SHA512

2352f8532b05fd8d1f637443182f24aea26ade7da8f4ce731739dffe171910bb6fc103838028453e7d5626d4e1eb5bb3c28b15bc7cdb8529ebc800dadb651272
SSDEEP

6144:GXkWpMQwzjCZl13fTS5W3tc7T1rdEjVJ3D:GXNMQ1ZDfTS5eccjVBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff05228ba4098a1b788d1695dd21ff23

Files

ff05228ba4098a1b788d1695dd21ff23
.dll regsvr32 windows:4 windows x86 arch:x86

d0ce7491427e1ed0cc260e78358aa4c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
OpenEventW
SetFileAttributesA
SetCommMask
SetEvent
SetHandleInformation
Sleep
SetConsoleMode
lstrcmpW
SetProcessWorkingSetSize

advapi32

SetTokenInformation

gdi32

SetBitmapBits
SetTextAlign
SetBkMode
RoundRect
SetLayout
SetTextJustification

msvcrt

_utime64
__p__mbcasemap
_cwait

shell32

SHEmptyRecycleBinA
Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ