1696102c9b43b9cd61bf8051d8964d30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1696102c9b43b9cd61bf8051d8964d30
Size

20KB
MD5

1696102c9b43b9cd61bf8051d8964d30
SHA1

e00d515b241a00a2cce0c2426e17f73ea179b8f5
SHA256

d47c0dbfe4657f47fb2c530a749b8c9f3f34598cda787a935c98e316998630ac
SHA512

2f901a5d377c46f5f57fe435e4a9b7868d72edd145110e12ec50a5fb51628a39872d1cf089da2863838c1ce34fead064499a5da204485269825fa860f548d906
SSDEEP

192:mKlFWLhPxvQBBcOYzTu1dViJ0810CT9NAGitiX7OWpkBI9idu7S7kbG9sWAnl:1AZvQB2Bz6iJ51X9uirOEkMiduW7j2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1696102c9b43b9cd61bf8051d8964d30

Files

1696102c9b43b9cd61bf8051d8964d30
.dll regsvr32 windows:5 windows x86 arch:x86

8311861af6f45215f5bd55c1dc03b84a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW
StrStrIW

oleaut32

SysFreeString
SysAllocStringLen
VariantInit
SysAllocString

ole32

CoInitializeEx

advapi32

RegCreateKeyExW
RegCloseKey

shell32

SHGetFolderPathW

kernel32

CloseHandle
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
GetProcessHeap
ReadFile
LoadLibraryW
GetProcAddress
WriteFile
HeapFree
SystemTimeToFileTime
HeapAlloc
GetSystemTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ