7506d37a2bbe2e4497a533f4e08269fc | Triage

Sharing

General

Target

7506d37a2bbe2e4497a533f4e08269fc
Size

11KB
MD5

7506d37a2bbe2e4497a533f4e08269fc
SHA1

95561b04d07dc27de13f64c943b43bd947867bdb
SHA256

7e72a4749160df1ad35074064314902a9f483dafed63959d9fdb3fae465ee3d7
SHA512

bac7fce7127155f21e101c42e113188be32ff63c22210eb7d964c17619fd7325c690f6fc74f1e95ccfd1ef747386fb81461254dd1929dc3c07ece4e09a5778f7
SSDEEP

192:vbS6M0ffHPM5MorrglOLqrV0EGBwKFwjClYkG2lNW//RRw:vKIvMVQVRKwKqKlNMRi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

7506d37a2bbe2e4497a533f4e08269fc

Files

7506d37a2bbe2e4497a533f4e08269fc
.dll regsvr32 windows:4 windows x86 arch:x86

93c8921df5acef1d698eb953e78f5d5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryW
GetVersionExA
lstrlenW
lstrcpyW
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind
MultiByteToWideChar
CompareStringW
GetModuleFileNameA
lstrcmpA
GetFileAttributesW

user32

wsprintfW
CharLowerA
CloseWindow

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ