682a1ae54058d1aa7d2fb8f50e4d90b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

682a1ae54058d1aa7d2fb8f50e4d90b4
Size

132KB
MD5

682a1ae54058d1aa7d2fb8f50e4d90b4
SHA1

189aeb235fdda2e63f50b0b14f313d2b64a69e6e
SHA256

743b259f017fe49fbf7a7b085d731395df29f54b92d899a948414d10d25d02c7
SHA512

defe97543c53036cea0eee1ac71f42b1650f1c3e9151d316d05708c7a848f0bee7a19fbccde10f0d6c40495433a31dd1bb68739f9a70cd7054e8d9f67f1858b3
SSDEEP

3072:+FJYW2BZG/nt/E4tmN9jl4N4CEXDm+0dlH/CpIi670Q8A:rW2jy1EX9p4CXqH3Cp070

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682a1ae54058d1aa7d2fb8f50e4d90b4

Files

682a1ae54058d1aa7d2fb8f50e4d90b4
.dll regsvr32 windows:4 windows x86 arch:x86

01b04a319d2776532fee3a819e9ec84f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

wininet

InternetConnectA

shlwapi

SHGetValueA

mfc42

ord5981

msvcrt

malloc

user32

BeginPaint

gdi32

CreateCompatibleBitmap

shell32

SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent

ole32

CoInitialize

oleaut32

RegisterTypeLi

urlmon

URLDownloadToFileA

msvcp60

??1_Lockit@std@@QAE@XZ

Exports

Exports

CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
SecurityMonitor
ShowSecurityDialog

Sections

.text
Size: 101KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE