c4b0e48096fcf5df96354c8c4b3644fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4b0e48096fcf5df96354c8c4b3644fa
Size

126KB
MD5

c4b0e48096fcf5df96354c8c4b3644fa
SHA1

8f67f55c035611a23bf33fd6397d698298b0a780
SHA256

2438595a893d98315e2ef752d4faef418b3f052f3c7d221a3d16e0fbd53a4de0
SHA512

9d92a5ca5e80942dfa76eb9e3a17394f68c429cf9b6c1de34e970c5918dc210201d97a7665473b96e2aebd20e33761a4a9649c385de0d408a56026e652db1a28
SSDEEP

3072:MLp767WuOpQzQbQxN+6w8Z4eziCTXqV3pq7NtDTXrSm8Av:M0WuOOUbQxZ/Z4gSPetXX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4b0e48096fcf5df96354c8c4b3644fa

Files

c4b0e48096fcf5df96354c8c4b3644fa
.dll regsvr32 windows:4 windows x86 arch:x86

7e1db0c595826da55b41459b3869cbfb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSAStartup

wininet

InternetConnectA

shlwapi

SHGetValueA

mfc42

ord3663

msvcrt

??1type_info@@UAE@XZ

user32

EndPaint

gdi32

CreateCompatibleBitmap

shell32

SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent

ole32

CoInitialize

oleaut32

RegisterTypeLi

urlmon

URLDownloadToFileA

Exports

Exports

CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
SecurityMonitor
ShowSecurityDialog

Sections

.text
Size: 95KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE