bc95cfbd4a75b516f79ea8d22801e960 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc95cfbd4a75b516f79ea8d22801e960
Size

97KB
MD5

bc95cfbd4a75b516f79ea8d22801e960
SHA1

4b5e51d47028daa7a820361c2aa1a72677c7e0f4
SHA256

b556846faca6a83190a1831cb82580866b68c4e8df9fc5bb7748bfd05d0244ef
SHA512

8e3b58df705b0ad530abf789a705d898af4da904e7bddc4c7f7ed5c9170d935e7f11e4e075785d0fd0d6f0098d7a559cb5a7bc6c053437e4ad499ad415c8d427
SSDEEP

1536:zelpK6Bp3ctQHCMQM+YRpZhIR5nslJBE35cRCi7DzCuB+2lAn0wJHsy8JZY:zWK2pmQQMrpOsfSJGX7Dy1n0kGZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc95cfbd4a75b516f79ea8d22801e960

Files

bc95cfbd4a75b516f79ea8d22801e960
.dll regsvr32 windows:4 windows x86 arch:x86

55927bf4d38d2b520ce7510859dcc740

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

advapi32

RegQueryInfoKeyA

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 45KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE