6acd32ec80763e10ac21229245ebab69 | Triage

Sharing

General

Target

6acd32ec80763e10ac21229245ebab69
Size

209KB
MD5

6acd32ec80763e10ac21229245ebab69
SHA1

959c1ec1d45619c38a551d76693df41f47dcb1cb
SHA256

20d698f567960457a1a69f3dd3860a1fcccb9011254680812b69087fe4e5fc39
SHA512

fbab8ae271ce7b06684f6e64b49f7cf299e6ea4392e800a841e6c6ef259f9aa757182a7942ff4711da85120542e16d170a2cd3c05ce78c10fdeda45994d4611a
SSDEEP

1536:bK7Eu2ghJQQFFba6Q+5sWcRQBP2HU8yFYYHDWhDA2wRMlv/mEma6p/s8Kt34TEz2:LgnQQLRmtHmI9oYCmkUQrb45k+KV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6acd32ec80763e10ac21229245ebab69

Files

6acd32ec80763e10ac21229245ebab69
.dll regsvr32 windows:6 windows x64 arch:x64

560c5900fe940cbdf0d5621bbb07d935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

StrStrA

kernel32

GetCurrentThreadId
GetCurrentProcessId
CreateFileA

user32

GetClassNameA
GetSysColor
SystemParametersInfoA

Exports

Exports

?loptew@@YAHXZ
?tupobw@@YAHXZ
DllRegisterServer
PluginInit

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ