016bd5edbc99d0b7dc69db30e9c8f3ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

016bd5edbc99d0b7dc69db30e9c8f3ac
Size

12KB
MD5

016bd5edbc99d0b7dc69db30e9c8f3ac
SHA1

0d1189dc3dea0d31ac45693400fee51928fc48af
SHA256

179f60eb389ff0b73feb7b6f807eafc913371a605f2521f42595ec748dd18a5b
SHA512

ea011e7fc3f06a0f1efee0ed4be67843c042a388fd00f0bdccef1137cc3b39a34048092c399bf72ada4f7431d7da1297933526486fa6c1ba7752f8fb2badf880
SSDEEP

192:NRQZeY7I2n8UhMGnhC4ZzCUlcvAsnFkD8mhhYhnKOpPkK5tfvoWXhAql3xNSqhIK:HQMYku8Uh1nXzXMFnFkYm/Yn5tfvoWXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
016bd5edbc99d0b7dc69db30e9c8f3ac

Files

016bd5edbc99d0b7dc69db30e9c8f3ac
.dll regsvr32 windows:4 windows x86 arch:x86

c689c9a50a37d87bb5f7c58d78d01321

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

wininet

InternetConnectA
InternetCloseHandle
FtpGetFileA
InternetOpenA
InternetGetConnectedState

mfc42

ord5442
ord5186
ord1979
ord6010
ord6385
ord354
ord665

msvcrt

_initterm
free
_onexit
time
srand
rand
strcmp
sprintf
strlen
strcat
__CxxFrameHandler
memset
strcpy
malloc
__dllonexit
_adjust_fdiv

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
GetWindowsDirectoryA
DeleteFileA
GetCommandLineA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Dll_JustWorking

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ