85ddfbc619193bdca78bcd2622e1424f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85ddfbc619193bdca78bcd2622e1424f
Size

315KB
MD5

85ddfbc619193bdca78bcd2622e1424f
SHA1

0ae2325800942334d0af8b957a64e7ef5f22ac8f
SHA256

1955c54322ba02ce5cf3e86158d608fdc66b35905bbb6ee436019679b70f12b6
SHA512

fcfa1b2f4fe6429acb486f0a1beb0f6018dea08139c459de67a2cdba79fc5a9a470016edeca951408ce6cfae3da2bfa5faef1a3fb5bb78367aa2160b5b038390
SSDEEP

6144:fo84BT0U7VznHxBZpi3iEso6ehkoiLS+aH4P/wVnnAaBL:fD4KU/7o3iHonkoiLSxH4P21BL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85ddfbc619193bdca78bcd2622e1424f

Files

85ddfbc619193bdca78bcd2622e1424f
.dll regsvr32 windows:4 windows x86 arch:x86

ac286c169455b9c88fed9cd00f100c0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 300KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE