3698b3c6fa6937cf9b63f070c5c280ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3698b3c6fa6937cf9b63f070c5c280ba
Size

84KB
MD5

3698b3c6fa6937cf9b63f070c5c280ba
SHA1

0fa894341ad996543fe8b018f87bd54e23537cae
SHA256

bba666c8f109358dbe3b476463ab9d41bdf956fdb138f6b4202a6ace395687b4
SHA512

de656e867857f8f0875b0fc82a7db6d43268daa7805b32753b516d127bb9aac5cd3eeb5b8e824d7056aa75d889e9db5f2eb508a29e0aa443f77edb2bd8542150
SSDEEP

1536:jGGSjq4NZ4OA/MljcBowgaOHmKMzPQXuHd40NYLZWVONGIE:iag4ZUljc3Kio+fNAZIEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3698b3c6fa6937cf9b63f070c5c280ba

Files

3698b3c6fa6937cf9b63f070c5c280ba
.dll regsvr32 windows:4 windows x86 arch:x86

f287fd6bfed6cb699b37f724e5b2939b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Pngjolk
DllMain
DllRegisterServer
DllUnload
DllUnregisterServer
ServiceMain

Sections

.text
Size: 81KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ