8b1533cd472ff71a4a76b8bbfaf56645 | Triage

Sharing

General

Target

8b1533cd472ff71a4a76b8bbfaf56645
Size

100KB
MD5

8b1533cd472ff71a4a76b8bbfaf56645
SHA1

1a70d311eed712b75f85131719e79eb4118ea527
SHA256

ca8a15727d665b4302e4282ae81949c53c535d77f48b65e2a53e9c88f85e7e36
SHA512

e406aab4d0dc7e1ba256b523e2f711977d73a8046f2ee74dcf4dd4fafa0d8baa7083cff25bc33c52e88c486706a3e5af8ba443efd4261a4a6a0fc1e7c8089ec5
SSDEEP

1536:DYh/cWtl/chUtp/00/IwDgX2N+3BqVUg25Zy879ND8vcuNMXKassC44fIJP:DsZl/Ftx00QwE2+Gh2O879mORbC47JP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b1533cd472ff71a4a76b8bbfaf56645

Files

8b1533cd472ff71a4a76b8bbfaf56645
.dll regsvr32 windows:4 windows x86 arch:x86

de305371d94bf75c0b1da2e6ee99233a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetStringTypeExW
GetProcAddress
SetConsoleActiveScreenBuffer
NlsGetCacheUpdateCount
LoadLibraryExA
GetProfileIntW

advapi32

FreeSid

oleaut32

SysFreeString

user32

wvsprintfA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Oppdkna
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 97KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ