0f191258cc5ddcd070ad33b3f9e09704 | Triage

Sharing

General

Target

0f191258cc5ddcd070ad33b3f9e09704
Size

10KB
MD5

0f191258cc5ddcd070ad33b3f9e09704
SHA1

f9b3f59e8aef33d8da05baf79aabb76d688253be
SHA256

db35f84a0a1fa562f11450a4a1f426a8bad693cbf7bd7778868a6c29ab4f3180
SHA512

d6e20302622d0f2d9a1d949b9d5442b2e1188e9cc521e9e144b7404d263a9e9fbec924a96170491278fd5a89d7d95211def46f7dca850e0030b169d4d3db97ba
SSDEEP

192:0yrKffmrOh8tuluJzVYJpPrV0EGBwKy+N5AT2J900XFTLJe//RNEZLHs:xr+VT2sxVRKwKyT2NXBLaRsLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f191258cc5ddcd070ad33b3f9e09704

Files

0f191258cc5ddcd070ad33b3f9e09704
.dll regsvr32 windows:4 windows x86 arch:x86

813f19f779b20865400e45ba1dcb9b2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryW
lstrlenW
GetVersionExA
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
SetFileAttributesA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
RtlUnwind
lstrcmpA
CompareStringW
WinExec
Sleep
GetProcAddress

user32

wsprintfW
CharLowerA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ