cb8aad7c7dcca68fcd265de24335716a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb8aad7c7dcca68fcd265de24335716a
Size

19KB
MD5

cb8aad7c7dcca68fcd265de24335716a
SHA1

5960680b473bf377a7078fbd3243e4d834870d03
SHA256

75f45a0a39cdbb884a7180947f5117ae782242947091569c267a3918de84b23d
SHA512

567257b41ccf7adfcadc2f17463c945599d1c41167eeda8c7c36b7177319a127a4b3e804d35a8c1691285c8fe746dcfe2579238516ad51b6e92c1ec4355b5ff1
SSDEEP

384:TQUX0gkeLFwfvElz7VtHIFOEn/Wfuf6QkmHRA0u:TwgtLS36z7HHIf1HW0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb8aad7c7dcca68fcd265de24335716a

Files

cb8aad7c7dcca68fcd265de24335716a
.dll regsvr32 windows:5 windows x86 arch:x86

041be06c16a093581b6ae72fdf37df70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrStrIW
PathAppendW
StrStrW

oleaut32

SysFreeString
SysAllocStringLen
VariantInit
SysAllocString

ole32

CoInitializeEx

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW

shell32

SHGetFolderPathW

kernel32

LoadLibraryW
WriteFile
SystemTimeToFileTime
GetProcAddress
GetProcessHeap
CreateFileW
GetModuleFileNameW
CloseHandle
GetSystemTime
MultiByteToWideChar
HeapFree
HeapAlloc
ReadFile

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ