66fdf22f142d0b12df882c8c388afd9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66fdf22f142d0b12df882c8c388afd9d
Size

48KB
MD5

66fdf22f142d0b12df882c8c388afd9d
SHA1

f1239c5410d96600e8966698a7591591b630beb6
SHA256

878520d7f0a5b3c41b8c39f607ab1919e43a13be47d84498905b3f89d017627b
SHA512

1dd0ba525655e2417935edd82a1046fd2c175dfa00a495eaad81e0012f75094885ec5e82a2fe2aa13397617bab1a7e6e831f0400ad135f073cde067ed47417ad
SSDEEP

768:nK4MBkxVHGk6u59uwzBI+UJQ1G27aLTJZzFoYKC78jZmtJRmxOf8J:K4X6u59uYB5U2eJ5FoNw8jIJej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66fdf22f142d0b12df882c8c388afd9d

Files

66fdf22f142d0b12df882c8c388afd9d
.dll regsvr32 windows:4 windows x86 arch:x86

4e04ad7ed3dc41820f7552026f59ee54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

urlmon

URLDownloadToCacheFileA

rpcrt4

RpcStringFreeA

advapi32

RegSetValueExA

shlwapi

StrRChrA

user32

SendMessageA

oleaut32

SysFreeString

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

??0bad_cast@@QAE@ABV0@@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE