79fa93dd75564f4c5a6981dbc7d88f4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79fa93dd75564f4c5a6981dbc7d88f4a
Size

131KB
MD5

79fa93dd75564f4c5a6981dbc7d88f4a
SHA1

8fb2e16f7d9111f0ed573bf6987f4d9510fe533f
SHA256

0daaf06b1e45d565f515a193e7501b952f83bf74b0f7bf618a03a51bc3e7d44d
SHA512

a9628c28a152d4c8c850440d0f47dab1d8688b17cf1d112dac4bcb30d3e64a49ac87c8632a1323ef0a1ca8ee9ccc5f40ebd7307d97132a7548312ced48e0822c
SSDEEP

3072:u0+8meayS1e+JivpvzXKaIHvkGy2lOANNcZ7zq1:u0+gayS1ehKaIsGVoI87zI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79fa93dd75564f4c5a6981dbc7d88f4a

Files

79fa93dd75564f4c5a6981dbc7d88f4a
.dll regsvr32 windows:4 windows x86 arch:x86

3ba4399ee4bb8d2228dd70ffe7475381

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

gdi32

GetTextCharsetInfo

advapi32

OpenServiceW

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE