474f0024c6c0741151b75d4342c67cbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

474f0024c6c0741151b75d4342c67cbe
Size

465KB
MD5

474f0024c6c0741151b75d4342c67cbe
SHA1

72a6c9d2e590c8e658f417285b76a3ce339852c1
SHA256

ab3d1b496f7d6d7a20a78d9ed42bbbf1dc275465acd201e7bea1e39aa9155bf0
SHA512

dfb54a0826cfb52e2c268f6b27d8a077335a6be02e30d886d4ab02b0ae446ac7b1a81e8abff7ca2db60760eb200b982934b547f76915af432613273b443c4674
SSDEEP

6144:MH9wwMZWjYVYbxiLlxrifcqhLxSOldE8zUH5h+pR5296Sm3iG0hjwR45Mw/YogcB:okFdK2aUpSFCp0LcjzCemnkHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
474f0024c6c0741151b75d4342c67cbe

Files

474f0024c6c0741151b75d4342c67cbe
.dll regsvr32 windows:6 windows x64 arch:x64

35890417b8426ce9add593489cc763e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryA
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ