cb92df78982cd200830c3463baba29a4 | Triage

Sharing

General

Target

cb92df78982cd200830c3463baba29a4
Size

9KB
MD5

cb92df78982cd200830c3463baba29a4
SHA1

005c3a7e45546a34a542572a31c9c5d08cdc66bd
SHA256

52390a0ceb163b4bb333377a6a9b3a294b7a9dd3105940a2ef6c911f233b1255
SHA512

e4f7c468420a251c5cffee9138d33e96b2e2a63e8a46655b31d74e055d86d646f30432c32dd2d58f343d885ecc91a1ce4d80a753205fa776db6b4e238aac97a9
SSDEEP

96:c6wrtZhW6XmUL+iu+GxN8Hf8Mu6XKHMz7JAOAeoLDPa4ywAnzP7nK7kNubdR:Xs8gL+WLnas/uOAe4Pj77kNupR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb92df78982cd200830c3463baba29a4

Files

cb92df78982cd200830c3463baba29a4
.dll .vbs regsvr32 windows:4 windows x86 arch:x86 polyglot

95187d02d4fbeeb01fdb99624c9921b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

GetSystemDirectoryA
GetModuleFileNameA
GetFileSize
GlobalAlloc
CreateProcessA
WriteFile
CreateFileA
lstrcat
lstrcpy
CloseHandle
MultiByteToWideChar
ReadFile
SetFilePointer
lstrlen

ole32

IsEqualGUID
CoTaskMemAlloc
CoTaskMemFree

oleaut32

LoadTypeLibEx
UnRegisterTypeLi
LoadRegTypeLi
SetErrorInfo

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ