36d38a74fa065f71764ea072bc7d6575 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36d38a74fa065f71764ea072bc7d6575
Size

9KB
MD5

36d38a74fa065f71764ea072bc7d6575
SHA1

0abccdd2188a1ab01bf2e0d94d14b7ec7fa1db2f
SHA256

c109d202a1091c82630b19bf3f59f95bbc1964b5c7bf8ef93b95d7003f9a7484
SHA512

1b5c56236a4e7e9206336b35f7feb62e70fbbcb381c490a00c3a84ac07953aaafbed7de81386a98005ea4b85f0b6a9c1973fc710e716405d572f44d457fe21c8
SSDEEP

96:1SYrCr2iFRwnTFrOv8TZ8zNCjrAICDFG1kAPAqAMI0fomLB:0eiz4rO0TZ8z83AIChixgMboml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d38a74fa065f71764ea072bc7d6575

Files

36d38a74fa065f71764ea072bc7d6575
.dll regsvr32 windows:4 windows x86 arch:x86

6a146b03d6ed13c553858412eed2e110

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

wsprintfA

advapi32

RegSetValueExA

wininet

InternetGetConnectedState

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE