15f158694e8e18bf99720dcb79880f57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f158694e8e18bf99720dcb79880f57
Size

325KB
MD5

15f158694e8e18bf99720dcb79880f57
SHA1

aadcb96f4316ae3d740819fd310c29695a59dffc
SHA256

267f24f0364b90925b0af013c65cfabe6a2a156bf4427fa205cbae21340db19b
SHA512

ea04e4b8d417d52f0bf766c96b3a05f2927216f5c8a4059e6167685349370638a10a00b0f13fa8a17eb4af1aedebd46d4da61d6c4d937d0f6cf8036d897413db
SSDEEP

6144:yYFxGa6+jTluQDJVoHIZ0z7PW0uet1hjdweUt7DTxzPE:yUj93VGHcey4DdY1zE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f158694e8e18bf99720dcb79880f57

Files

15f158694e8e18bf99720dcb79880f57
.dll regsvr32 windows:6 windows x64 arch:x64

b211bec2627ea9b5322d60ef3ed97e1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
StartW
StopW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ