1699fc62de57ba949ed91a740ed0810f

General

Target

1699fc62de57ba949ed91a740ed0810f
Size

60KB
MD5

1699fc62de57ba949ed91a740ed0810f
SHA1

7d3fb73880e31bfdb6db1e1cd3b6f5e6dd9b04db
SHA256

0ee9b6f76e2e45c19552666443be52caaa7510f52eda54ce58cce3139f6956ce
SHA512

a443ae1ec15d627f19eca9433ea3ca12bc8e97cd1b1b9c4237bd8de393242f2526c824a368d84192bf31414c69c2664816359316227c1ebe683e82873d8fff5f
SSDEEP

768:gVrh2+b/Uu+rScfmotkTYGBTmefVymETLgbx2kYo9YoY/KTXx8:MhBb/+urTlTmefVymEPM+o9GKDx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1699fc62de57ba949ed91a740ed0810f

Files

1699fc62de57ba949ed91a740ed0810f
.dll regsvr32 windows:4 windows x86 arch:x86

8daf90a600673476d95485b9e1297f80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
lstrcpyA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
RtlUnwind
SetFilePointer
GetProcAddress

oleaut32

SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
SysFreeString

atl

ord30
ord58
ord32
ord57
ord18
ord15
ord16
ord21
ord23
ord31

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8daf90a600673476d95485b9e1297f80

Headers

File Characteristics

Imports

kernel32

oleaut32

atl

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB