99c187fa71c98b90a3c63198f6a4c77f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99c187fa71c98b90a3c63198f6a4c77f
Size

141KB
MD5

99c187fa71c98b90a3c63198f6a4c77f
SHA1

7fda50f1c55b6580bf97f5e4de1cd7906e6fe6ee
SHA256

8b02fc67dc2f3fd52159af7fc5a0c139640de04d6c634234239dff8ad1644e76
SHA512

8a5f1ae519b36bdb3c75a1c46e26e7fe8c94838132b6c2f58084874ef4552f1fe3fe80711d7975adb01dcb3fdc1752e3825897d61291d502b39e89efa9827c0e
SSDEEP

3072:pWK2pmQQMrpOs5zQKwfTrIT7E2MFJyBrZgfaGcc6E:pMpmQQMNO2varIhMFAB1gSGWE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99c187fa71c98b90a3c63198f6a4c77f

Files

99c187fa71c98b90a3c63198f6a4c77f
.dll regsvr32 windows:4 windows x86 arch:x86

55927bf4d38d2b520ce7510859dcc740

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

RegQueryInfoKeyA

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 45KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE