0c074631b9a457c8afea96412be7fc99 | Triage

Sharing

General

Target

0c074631b9a457c8afea96412be7fc99
Size

29KB
MD5

0c074631b9a457c8afea96412be7fc99
SHA1

0c88732c4f7e33bb8e4dbd7b547f7c2b8f59a5e3
SHA256

869145fd8c95f6b1d6f86f8b9b3c82d40009ddb78683e358d3fc3ed36c7f143b
SHA512

24bb85f128faed92c6aea12bb60510acf499beeb2b74ecf294fa8898e920696695fccc1b6c5d386a322ee95a4e612372dea6b6ab538871f1d6f914233297d4ff
SSDEEP

192:tAVfRGGBFTByM/qX/DaDKkERn0dLhWgyAULecCWd5wQqp:tAV59Q+qXm6qPcecC6qfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c074631b9a457c8afea96412be7fc99

Files

0c074631b9a457c8afea96412be7fc99
.dll regsvr32 windows:4 windows x86 arch:x86

ea53f52ea69454caf87ce76b1dee4300

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
HeapCreate
lstrlenW
CloseHandle
InterlockedDecrement
CreateFileA
GetSystemDirectoryA
MultiByteToWideChar
lstrlenA
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
HeapFree
HeapAlloc
ReadFile
DebugBreak

user32

wsprintfA

oleaut32

SysAllocStringLen
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString

atl

ord21
ord15
ord18
ord57
ord32
ord16
ord58
ord30
ord31
ord23

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 397B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ