06558320a2ba03ede6ca276c1a895ea9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06558320a2ba03ede6ca276c1a895ea9
Size

15KB
MD5

06558320a2ba03ede6ca276c1a895ea9
SHA1

0ce49b2d71e10d06e3222b7b8537c589b8b38adc
SHA256

e7b790f5c4f1276b5be2958debb30cc64511ad4caf9f3d711258b32a1c6860a6
SHA512

546df07d434b0d292582734f84f9dc84f8228929b7906a1602cbd84ca8b05cdebc4be0ed6a45f94312e0dc26bff2c503f2e6a9b9ad79cfb2ec6acbe031ca782a
SSDEEP

192:IlKuiweUs3MS0kQbPE5JPlu8FiMUHf2yWdqPC/A2aT4GglkKNA36:Ilte10aJu22C1aU1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06558320a2ba03ede6ca276c1a895ea9

Files

06558320a2ba03ede6ca276c1a895ea9
.dll regsvr32 windows:4 windows x86 arch:x86

7dbc9f64da0133ec732526f30ec859c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

wininet

InternetCrackUrlA

msvcrt

memcmp

urlmon

ObtainUserAgentString

user32

IsWindowVisible

ole32

CoInitialize

oleaut32

LoadRegTypeLi

atl

ord16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.rdata
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE