3cb90212277fea4adf250dd63c1a7f65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cb90212277fea4adf250dd63c1a7f65
Size

16KB
MD5

3cb90212277fea4adf250dd63c1a7f65
SHA1

3ec9c9e74e86d1b9bfffc2ce452cdf6f05e5683f
SHA256

533d7676aa04a9aa5d692f47a33b9c3772d7ee0b3dcad0a1f37ab48bafee75d3
SHA512

0842e56e804418513e54b2dd698dba49ce3f227d0b949d10929a5b7e28c40e07456ab595628bbc03b7ca51c20e60d1026b7ef79f577f7fada45aaf0c74ec9f18
SSDEEP

192:gitVg4TkclsJjGuj6LP8iL+PMHR9/Ff87axnXTNYvlT6Y57eFSpKy+WW64J3DXDP:nVecqz6ztRxDNe1rJKy06s3DXDOvSTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb90212277fea4adf250dd63c1a7f65

Files

3cb90212277fea4adf250dd63c1a7f65
.dll regsvr32 windows:4 windows x86 arch:x86

9f42323b69a4c0d1af7d487844921840

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryW
lstrlenW
GetVersionExA
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
SetFileAttributesW
Sleep
RtlUnwind
lstrcmpA
CompareStringW
WinExec
SetFileAttributesA

user32

wsprintfW
CharLowerA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ