e12ffa6b6876e8cd2e98b7393034cc96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12ffa6b6876e8cd2e98b7393034cc96
Size

18KB
MD5

e12ffa6b6876e8cd2e98b7393034cc96
SHA1

78c5dc6897e22b6af5d286f794ebb9db207b7249
SHA256

88eb7a3458768137e317dbd8adf88b72adbf53370c0ec94e8362157a3b39e679
SHA512

651ad8bdd7bfbb600eaba8f25a3d4241d69d8844b731cc33ed28b018e08e5cb068ebd56effef9a40c21f9034e64842f71ea4b5d8cca2de1a029edc5b1f0e5616
SSDEEP

384:8TKir1i/8WaBn6igjVJGBoe4p2lQb5fx69HOZFC:OKig//CWJGBxXebn69uj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e12ffa6b6876e8cd2e98b7393034cc96

Files

e12ffa6b6876e8cd2e98b7393034cc96
.dll regsvr32 windows:4 windows x86 arch:x86

007a70a136d39fd183b3780183203eac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rpcrt4

UuidToStringA

ws2_32

htons

wininet

InternetCrackUrlA

shlwapi

SHDeleteKeyA

urlmon

ObtainUserAgentString

user32

IsWindowVisible

ole32

CoTaskMemFree

oleaut32

VariantClear

atl

ord58

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

msvcrt

_purecall

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.rdata
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE