396e69b75999632ea97f956ac7795874 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396e69b75999632ea97f956ac7795874
Size

80KB
MD5

396e69b75999632ea97f956ac7795874
SHA1

c0a721ec0d492ebba4667971674c63a14657411b
SHA256

faf8737328ada8c4a901a6dbf1b58befffdbb848c07eb1c08f22924f76327ea3
SHA512

893175c55969a5f1cb052ad6238059cfbf361bf7d716f37d0bfe88ada20813ec18cf737a630ec5ae9b9b28c8443e61db55aa4acfe63a5d5f34613ab74f3b0a9f
SSDEEP

768:pWadwr+b2aikC6DwLUslDgXBpH/zuVQX9pzvjU4YqsABzktk42mWhlzS8q:75ikC6DwLUHfzDX9JU4YK83Az9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396e69b75999632ea97f956ac7795874

Files

396e69b75999632ea97f956ac7795874
.dll regsvr32 windows:6 windows x64 arch:x64

4f0c2c904283b81b81368f0a41d1a1ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

StrStrA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ