15a619372af690ccababdc54fbfd43bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a619372af690ccababdc54fbfd43bb
Size

47KB
MD5

15a619372af690ccababdc54fbfd43bb
SHA1

c2e2befdbea7a7d263375d5c43e5765dbfc0e77d
SHA256

fe7f53abcb4feba77a3125aae43078638086aca8be64865ad5ec17fc69da68d0
SHA512

e18463f5a5b97e0c10e1cec2acb111f53cef68ce91e8ac8abec353185a51c5b1f8164e30d32eecee0455a1c7646d33641737ffe677b97fb5c5fad043c4db76c4
SSDEEP

768:abuJ+dx6821/DYQTTsk2LpK0H1OvUIWM9qbv1jKefyOm3GpDlX:aNn6r/D/2LZ1zIrgb1JqvWdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a619372af690ccababdc54fbfd43bb

Files

15a619372af690ccababdc54fbfd43bb
.dll regsvr32 windows:4 windows x86 arch:x86

3ff1f08911549d2356b3a180b889e815

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

OpenServiceW

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE