9a1234604be7cf30f1fe8314f7e7d27f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a1234604be7cf30f1fe8314f7e7d27f
Size

410KB
MD5

9a1234604be7cf30f1fe8314f7e7d27f
SHA1

b6beea547c5f41ed7de87ce5c1a29b502470ec75
SHA256

e94a0755987bb3977a1f0ada08c3177402d7c2e0c9bccdaa970a3c3841c8bca7
SHA512

831f963f711003bb244c0113c85ec825f526e649cd85f942eea799cda40b203405f29b72c7a4d10ee4a2e7feeb6dfa9be97b083f8ce88a6594d75137ae4ecff0
SSDEEP

12288:uENyYu8Qqz4miF5T/KUhLKH4JCndQi32F8y:ueZnD3YIn2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1234604be7cf30f1fe8314f7e7d27f

Files

9a1234604be7cf30f1fe8314f7e7d27f
.dll regsvr32 windows:4 windows x86 arch:x86

8f3641dd05a30e5a00cd34019ad38bb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegCreateKeyA

shell32

ShellExecuteA

oleaut32

SysAllocStringByteLen

wininet

InternetOpenUrlA

ws2_32

inet_ntoa

rpcrt4

UuidCreate

atl

ord32

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 408KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE