a0e862843aa79f1e543a3d6ec1925fbe | Triage

Sharing

General

Target

a0e862843aa79f1e543a3d6ec1925fbe
Size

84KB
MD5

a0e862843aa79f1e543a3d6ec1925fbe
SHA1

f643c35efea205477b2d0307154fb4714c4ff17e
SHA256

524dcb56f01cd28944c19cc78b7bca8825d50bf2cb9ef07658e46c4b919769be
SHA512

46ad2044fc8a754b5293b93edff9ea63bb81c09e8c36491235a28345e5cf24c3e33f5dcd102c155fd719b802427614dfa90653d98aa12155c6c924a70c963c99
SSDEEP

1536:uyjPZsKRXulEGSnfc8yx5xPD17zA0t5kXUV48T1k87H1k:uy7OOqEiXhnA0t5nrT6QVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0e862843aa79f1e543a3d6ec1925fbe

Files

a0e862843aa79f1e543a3d6ec1925fbe
.dll regsvr32 windows:4 windows x86 arch:x86

f287fd6bfed6cb699b37f724e5b2939b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
GetProcAddress
LeaveCriticalSection

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Ojdomgp
DllMain
DllRegisterServer
DllUnload
DllUnregisterServer
ServiceMain

Sections

.text
Size: 81KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ