c26eed83359cb38e74637ccc33addbdf | Triage

Sharing

General

Target

c26eed83359cb38e74637ccc33addbdf
Size

76KB
MD5

c26eed83359cb38e74637ccc33addbdf
SHA1

76891077d79b44e99fec4d59fd5f0bc5f7620b20
SHA256

23b67593cd47fbad887650b9271306c61f8903e560a578e66ead98b56fda2d33
SHA512

72aaeb61d05242e58c1e1c7d1d6ee088bb7657cfe60d1376227a1e624a0c46d062448d8950cf0583884f66f2a2abe7cc3c204d6ad11cae9db53fd77a560a2f08
SSDEEP

1536:3Nf1VqzOw+ZaqxgSc7vBSE4Su8HBmBCcsAKmMokUfZd+UUMjf:VqOEqxgNvwdYBmBIAiokUb+URjf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26eed83359cb38e74637ccc33addbdf

Files

c26eed83359cb38e74637ccc33addbdf
.dll regsvr32 windows:4 windows x86 arch:x86

f0c57333219bb8a3037dc2298f402f39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

FreeSid

oleaut32

SysFreeString

shlwapi

SHDeleteKeyA

user32

CharNextA

version

VerQueryValueA

wsock32

send

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 74KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE