4c06679da425b92a4816a13d5f2a0d12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c06679da425b92a4816a13d5f2a0d12
Size

9KB
MD5

4c06679da425b92a4816a13d5f2a0d12
SHA1

bdd75dd2a4f1c23763b6c362481e68b2d3375060
SHA256

10bccc2a0a40ab67193685a2636cc9fa5d47ff02fae9d1043ded4e072faa9db0
SHA512

f2abfda09b5174317dd742f4bc064dc94f79994c0f0de532bfd07eb917fe89b50e9182f51ddc02b8f34d7492096954ad9dcd5fe494a1314b9e8f18c1f7caaae4
SSDEEP

192:DtffdpFIluFsDcs0WrV0EGBwKy+CuCJ90bwHzDP0RWv2:DVI+uVRKwKyjBTD3v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c06679da425b92a4816a13d5f2a0d12

Files

4c06679da425b92a4816a13d5f2a0d12
.dll regsvr32 windows:4 windows x86 arch:x86

840c23b135c3b53371a56d659965d812

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryW
lstrlenW
GetVersionExA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
MultiByteToWideChar
CompareStringW
lstrcmpA
GetModuleFileNameA

user32

wsprintfW
CharLowerA
ShowWindow

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

oleaut32

SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ