74d010d5f257e468499610491a326114 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74d010d5f257e468499610491a326114
Size

63KB
MD5

74d010d5f257e468499610491a326114
SHA1

22b6d0c62e73c1eb19cb8ade61d02279ab625ede
SHA256

a21a06dfabbcbc2fbcd616626b3ffca56be22114bfbe42a3489be0bb4c1b58c3
SHA512

f0a854e1f810f361063512c74e64b34e1e26d96023e6cc2b2166a827c2bb852cdbef2ed4084461c57eddb2e2a728f6047e4ce1a5afed948f77ff4b9eec8e5282
SSDEEP

1536:Nvt8/NNJphFeL/S+SqNk/QVlU5U+1cr0B0fNsrHT4:yLDh4KNqImlycYBK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d010d5f257e468499610491a326114

Files

74d010d5f257e468499610491a326114
.dll regsvr32 windows:4 windows x86 arch:x86

cc57de27c39c384bfcfa14d98c1bbf0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

OpenSCManagerA

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE