52f99cd98aeefcf10fe43c5d5a6c8feb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f99cd98aeefcf10fe43c5d5a6c8feb
Size

123KB
MD5

52f99cd98aeefcf10fe43c5d5a6c8feb
SHA1

351f25aaed851a1638372107c26f45ca3959276d
SHA256

2ef344a4f1c3257f8f1e2310b3bc082f4e7830bcd538c36d6f58d15314370c3c
SHA512

fff28b38f6587b71c28d540d4cdbe267a7f3d4784cae17ef9ecc2e262a4ab5546e9a88c3184a2d8201faa429c3dcc2614e92911b13b575e661489a5f4dfaefe9
SSDEEP

3072:mje8/4gOE4sPUwK50+VMbwEk7q0GZ2e6VrM8:WeSOE4Wzy0P3k7qN3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52f99cd98aeefcf10fe43c5d5a6c8feb

Files

52f99cd98aeefcf10fe43c5d5a6c8feb
.dll regsvr32 windows:4 windows x86 arch:x86

7553eacac4bd3969b546e50e76393a8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

gdi32

GetTextCharsetInfo

advapi32

CloseServiceHandle

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE