8a2288256a1a3f10b6a9f39d8d67a4ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a2288256a1a3f10b6a9f39d8d67a4ca
Size

47KB
MD5

8a2288256a1a3f10b6a9f39d8d67a4ca
SHA1

a85f1ab02cce7d94ba8316b7ce876a93ea52cf49
SHA256

e38c722490612c4a91a7e81f1a72c00863f5147148884bfff5cfc2bd8c23a60b
SHA512

7e05a8b9357ff0ddc5b0530c8fe1e91c547c8b0c40cc44c6ce4b83bfe03725993954f483d79469e789b9184e9aec5a320881f531b41d05696de8b4df1ac88477
SSDEEP

768:IeWmTw3ZmHOPdxD8GJ2ZYcFxDukaI7qf1LlS1UAW8NZ:IOwsHIGW2KOxfOtlSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a2288256a1a3f10b6a9f39d8d67a4ca

Files

8a2288256a1a3f10b6a9f39d8d67a4ca
.dll regsvr32 windows:4 windows x86 arch:x86

80fe09be11839b788b6967f33f928732

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

RegQueryValueExA

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 39KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE