de8cbf952631d7203ad2dcdefe02b829 | Triage

Sharing

General

Target

de8cbf952631d7203ad2dcdefe02b829
Size

96KB
MD5

de8cbf952631d7203ad2dcdefe02b829
SHA1

2cdf9e8c5f791193eb6aa69e5b3d4e055f662d77
SHA256

ecde18451f887c71f2c7f42a1121dce5f2b31c1e8d2d059ba456ea3873918754
SHA512

1a024ed5cc0117cb2b4e3483138e5af176d5916d0b8950a5a1c0518c2dc49493fbd5f61800048901f2e0f66d2748b412bc3a0430c2ce13e71dffe19e5a44d006
SSDEEP

1536:IQmk38nPVPXg6cHJdW9kE8EXoikWVyBzo78l:iV9cmc9ikJBzogl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de8cbf952631d7203ad2dcdefe02b829

Files

de8cbf952631d7203ad2dcdefe02b829
.dll regsvr32 windows:5 windows x86 arch:x86

06316bc38fc623c4ca08c71468d56723

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

actxprxy.pdb

Imports

kernel32

LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
RaiseException
LocalAlloc

msvcrt

_adjust_fdiv
malloc
_initterm
free

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ