29c30218aafad468fa6d6124fd141fe35210abd203049447d4da8dd2e9c3ae08 | Triage

Sharing

General

Target

29c30218aafad468fa6d6124fd141fe35210abd203049447d4da8dd2e9c3ae08
Size

3.2MB
MD5

d0c88cf7492780600d7fc942ffda4598
SHA1

ea861654197ffcfeb7485cc2ef6603f801bdeb2f
SHA256

29c30218aafad468fa6d6124fd141fe35210abd203049447d4da8dd2e9c3ae08
SHA512

074dc2b563af88624e4e020398fc6b86d6623fbdc6c231d0e077b38dc53775082462850c26917de9609126bcf5207820f9513a844919ace090e97927b0ba93cf
SSDEEP

98304:GFxzhxTHuQcE+6zYfOeBxUkWC7Y3x1gpmIhhQ5:IzhB5aOGUko20II5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c30218aafad468fa6d6124fd141fe35210abd203049447d4da8dd2e9c3ae08

Files

29c30218aafad468fa6d6124fd141fe35210abd203049447d4da8dd2e9c3ae08
.dll regsvr32 windows:4 windows x86 arch:x86

80a3a1e9ee7f23e76fab64272f257205

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

InvalidateRect

gdi32

CreateRoundRectRgn

advapi32

RegEnumValueA

ole32

CoRegisterMessageFilter

oleaut32

SysAllocStringLen

shlwapi

UrlUnescapeA

oledlg

ord8

ws2_32

inet_addr

wininet

HttpQueryInfoA

oleacc

CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA

comdlg32

GetFileTitleA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 2.2MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE