c633b4bf4aa2354dfea90663f4499c33 | Triage

Sharing

General

Target

c633b4bf4aa2354dfea90663f4499c33
Size

135KB
MD5

c633b4bf4aa2354dfea90663f4499c33
SHA1

25aa507d9283fb19454a0821e9484fda8cced78c
SHA256

0dbfe9ad3fe10326b87c8f9a282e8015ae7becdc2746e7979b5a24982b529754
SHA512

82dc44f809e0359033e2c6176ae2fa0de88cc32375854630bea78083986b2fbfa41c78fc3f47a6574817bb8cd9b6edae52ae527ef7a02dbe9aaf24e8ef842189
SSDEEP

3072:y58MR5yu09PcS/Tefj54UBze/wz7ViXGk8ARf:yZRxWPck2hgGVi28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c633b4bf4aa2354dfea90663f4499c33

Files

c633b4bf4aa2354dfea90663f4499c33
.dll regsvr32 windows:4 windows x86 arch:x86

3071cd5ae481b2bb47eea8cff92bafcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

version

GetFileVersionInfoA

ws2_32

WSAStartup

wininet

InternetCloseHandle

shlwapi

SHGetValueA

mfc42

ord5981

msvcrt

malloc

user32

DrawTextA

gdi32

SelectObject

shell32

SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent

ole32

CoUninitialize

oleaut32

RegisterTypeLi

urlmon

URLDownloadToFileA

msvcp60

??0_Lockit@std@@QAE@XZ

Exports

Exports

CPlApplet
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Install
SecurityMonitor
ShowSecurityDialog
_CFilter

Sections

.text
Size: 103KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE