c99c7109fa2bea2aa1d9c7138ec7482c | Triage

Sharing

General

Target

c99c7109fa2bea2aa1d9c7138ec7482c
Size

50KB
MD5

c99c7109fa2bea2aa1d9c7138ec7482c
SHA1

ae4184400fd3520e406e0019799253f7c4f8c0be
SHA256

2960f8e5b32b415e42bddff914d424bd353721cd152500106e325ad044d534c1
SHA512

6cf9180e78e46c1d83e5b6f5a0a0e86fe266f2fe28290883ec67832d09cb2c1c5c07f955e2d061370c1ef9392666401dac58a8dd309f99f3f56ad54df8eac213
SSDEEP

1536:hFTOr0b12OI8dcg+imtP17KTspE764ZY:mIq8SntpKIpCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c99c7109fa2bea2aa1d9c7138ec7482c

Files

c99c7109fa2bea2aa1d9c7138ec7482c
.dll windows:4 windows x86 arch:x86

cb0ed5229c37274ece18c39f80ceeafc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegOpenKeyA

gdi32

DeleteDC

ole32

CoCreateGuid

oleaut32

VariantClear

rasapi32

RasEnumEntriesA

shlwapi

StrDupA

user32

GetDC

wininet

InternetOpenA

wsock32

send

Exports

Exports

DLLGetClassObject
Init
InitA
InitW
Logon
ch
ss

Sections

.text
Size: 48KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE