Malicious_3b8835716367f2151a2b842e7e3c0315db958c0974fd4429e1a3197fc44ed003[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malicious_3b8835716367f2151a2b842e7e3c0315db958c0974fd4429e1a3197fc44ed003.exe
Size

64KB
MD5

2a09b31967527647129a5432a81918c5
SHA1

ae4ae7f7dc145592512c9a7e82fdfd38387978a9
SHA256

3b8835716367f2151a2b842e7e3c0315db958c0974fd4429e1a3197fc44ed003
SHA512

8fad2cb45a3cea26e7cb6fe299573132f7354d5072e9e95fc61a3154d0c82fb9f4e1e75c7aa5c771e1ebe7e7a9b30fb6d58b7d64382fbbc746cb9cadeb29c3f8
SSDEEP

1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malicious_3b8835716367f2151a2b842e7e3c0315db958c0974fd4429e1a3197fc44ed003.exe

Files

Malicious_3b8835716367f2151a2b842e7e3c0315db958c0974fd4429e1a3197fc44ed003.exe
.dll regsvr32 windows x64

0fea243ddb12b477b6b4ab25be7279d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrlenA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ