d772690b9db02c97da4e837ad4701c05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d772690b9db02c97da4e837ad4701c05
Size

13KB
MD5

d772690b9db02c97da4e837ad4701c05
SHA1

931383f1f1f0aa37b9941cd687faf65d01d533d9
SHA256

f2af26873aa6fa490bdf543e07006db2af01292bcd92951ea06184efc451eab2
SHA512

ca754ec5a2ee8249368a6f4d7940f411be074fd177c82c3509bc3dca60ff378bea6627326a5699cd1303c0c5995a7c1c85a88b1b4671d80cf90c71f3c18a20c6
SSDEEP

192:dO/QCd+UxPM++iFw3f7CyHyrk7E125acFnq9IA4+A9bTgpXDtVppJMt:dO/Xd5p7Byokgo5FrmAxMVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d772690b9db02c97da4e837ad4701c05

Files

d772690b9db02c97da4e837ad4701c05
.dll regsvr32 windows:4 windows x86 arch:x86

9c0432e1910a7f6b5d39ec1826872d5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetProcessHeap
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
Sleep

Exports

Exports

Control
DllRegisterServer
FreeBuffer
Release
Start
StartW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ