aa62121c0eb491b50e7d6da3014e3354 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa62121c0eb491b50e7d6da3014e3354
Size

299KB
MD5

aa62121c0eb491b50e7d6da3014e3354
SHA1

a3e0b44336b21193d5c6c075fccb43eda5f7a616
SHA256

6d641ae82f64e7e3e37466b03cfed66ed8575f7c1ec682dd24b1af2dd56cefc8
SHA512

1a48c262bc2908476ab3198ec90eb90e46ee2260cac6312f9c9fb156e8f5edbe715dcce150b72593d5d172986881d3e196711bcb73c8b615a9c6ef9c2c8dc513
SSDEEP

6144:YXNUYVFwAfGuLmRfuAr7pIqcmqBpRimSTB5wr+/Lg06:YXNP/ZLUfuA/pVqBpAmSl5GOLgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa62121c0eb491b50e7d6da3014e3354

Files

aa62121c0eb491b50e7d6da3014e3354
.dll regsvr32 windows:6 windows x64 arch:x64

35890417b8426ce9add593489cc763e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryA
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
StartW

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ