cbde1ece3d2f0f3b061b9e2c4b338ce7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbde1ece3d2f0f3b061b9e2c4b338ce7
Size

107KB
MD5

cbde1ece3d2f0f3b061b9e2c4b338ce7
SHA1

1b658bce422d22d9f31497eec650438bf122985a
SHA256

1a9406d4edb31c72f123bca54229b90baa96db384ef66d06d7fce1a0b4ecea9f
SHA512

d51d50a89c50e85d7a244187f1f4ea9f7c04569e25813794c8aba01632f281856e3e996791157c649ef0a753a64a501d4e9adb49b6da799f05e39546f0b6e47c
SSDEEP

3072:mje8/4gOE4sVlvT9QkhnJOnoxbwjh2Zi186EUoBJA:WeSOE4yp3hy+bIhXyBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbde1ece3d2f0f3b061b9e2c4b338ce7

Files

cbde1ece3d2f0f3b061b9e2c4b338ce7
.dll regsvr32 windows:4 windows x86 arch:x86

7553eacac4bd3969b546e50e76393a8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

gdi32

GetTextCharsetInfo

advapi32

CloseServiceHandle

shell32

SHGetFileInfoA

ole32

StringFromGUID2

oleaut32

SysFreeString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE