012f273daaa1ef01edaac40d6078aa37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

012f273daaa1ef01edaac40d6078aa37
Size

38KB
MD5

012f273daaa1ef01edaac40d6078aa37
SHA1

cd4b72727d32e0e2b8d50f5b3dc23133aba95274
SHA256

1f190fb9a6ec681bdc68ef45056059a6d769cf6598aa1799429c45cacf50792c
SHA512

08bd115044d01fa9eba0e1903d1497043bc689de9667a6d06bb0e041ed592d94396f415f9ebc435bc95c8c22d896bfb40691c38755f226b036f8b59a867804db
SSDEEP

768:O9GBkGdsCsnnnnFcirgeEifEoqe8lrEFbyPboAQBigQraqeaPZ6GduHnnnnnnob0:4GFdslnnnn2iN5feeyPbcBdQraqeaPZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
012f273daaa1ef01edaac40d6078aa37

Files

012f273daaa1ef01edaac40d6078aa37
.dll regsvr32 windows:4 windows x86 arch:x86

a543e780db983cc13b534cadac598376

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA

msvcrt

realloc
free
malloc
_initterm
_adjust_fdiv
_stricmp

Exports

Exports

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ