4d0b2455914a865e2403f2e94e25163e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d0b2455914a865e2403f2e94e25163e
Size

60KB
MD5

4d0b2455914a865e2403f2e94e25163e
SHA1

4c5e375258efb8ed36aaa08a239f3d09d74fdfa6
SHA256

bcbb74d334cff180591395d2775b03cc3ace6811d1255c9cf209b804e1777c44
SHA512

7823306e4022486eb8f24a60d9fe93f8855338732f8496e6c32309014c25c658404f0443772bdc48183463a946e7975d70f72f4c2b72aa55eafce2d5da56f4d4
SSDEEP

1536:keHT/RY33KCQrRzUGmRcPyUG+TOgn+p19:kOTZY33KrRzLly0nI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d0b2455914a865e2403f2e94e25163e

Files

4d0b2455914a865e2403f2e94e25163e
.dll regsvr32 windows:4 windows x86 arch:x86

6bfb3296a1b5132f82028e3494781a24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

GetPixel

wininet

InternetReadFile

wsock32

WSACleanup

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

CODE
Size: 54KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE