964f95202750fda5a067b2bf923cf220 | Triage

Sharing

General

Target

964f95202750fda5a067b2bf923cf220
Size

20KB
MD5

964f95202750fda5a067b2bf923cf220
SHA1

e549ba6a61e87fad81986c37b167e2b5a81e04f2
SHA256

cfe70bbf48f13cf1995ed3a55642bbd19d0cec3a0b1ba5cecc0c22d01aac0719
SHA512

164873de3ab49b68069246a84504566c17a56a4194f9e681cf078225f3a88d21666ec7172bae71512953049315ab91495a5d7598453f551ab06e819aa66b5663
SSDEEP

384:o7oScAVIPOnTvEkRBkE6i/n36qCWZ2RIFjukf4OP:2VmOnTvEkb6rpO2RijVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964f95202750fda5a067b2bf923cf220

Files

964f95202750fda5a067b2bf923cf220
.dll regsvr32 windows:4 windows x86 arch:x86

8fdc0638b45e3fdd9db643a9b21029a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcmpiA
CloseHandle
VirtualProtect
GetModuleHandleA
lstrlenA
Sleep
GlobalAlloc
GetLastError
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls

user32

wsprintfA

wininet

HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA

Exports

Exports

DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ