7eec464f2e1ff15c370f7f421ddcd7e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7eec464f2e1ff15c370f7f421ddcd7e1
Size

55KB
MD5

7eec464f2e1ff15c370f7f421ddcd7e1
SHA1

0a16e266e2bb0751285f6605e01e2dfb365cdaa3
SHA256

89284f551b3e6f2c454b53587e11e020e334effe90eb4c23d69e033b44a5c655
SHA512

bb3239a0d70d0073cb006d7175b592c3004655704bd1e402390620625740fe4a6436eb8151c5fce46725bb7514b6da68dcff58c81c4e13a65c6b8e75cbdd4a4c
SSDEEP

768:sHXgrMKLqwTyWagWxYIwrC2glJv7hnGcSvypvRJdh4FGTZ+F4a0oAgxyCWlu2xBi:cqMAMxwvwv9oyvhxO4afdyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eec464f2e1ff15c370f7f421ddcd7e1

Files

7eec464f2e1ff15c370f7f421ddcd7e1
.dll regsvr32 windows:4 windows x86 arch:x86

49782a5f4aa892917c3fb93d3bb9fb65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord537
ord941
ord800

msvcrt

_adjust_fdiv
_initterm
malloc
free
_mbscmp
realloc
memset
memcpy
_stricmp
_strlwr

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
GetProcessHeap
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
CloseHandle
FreeLibrary
HeapFree
DeleteFileA
IsBadReadPtr
LoadLibraryA
HeapAlloc
GetProcAddress

Exports

Exports

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ