549eb886be64ac9d6d2817575f5d0d0f46c0c5602fedd29aa561ab3f05e3349e | Triage

Resubmissions

03-08-2023 09:58

230803-lz1pbacg33 10

01-02-2022 10:22

220201-mendxsddc8 10

Sharing

General

Target

549eb886be64ac9d6d2817575f5d0d0f46c0c5602fedd29aa561ab3f05e3349e
Size

282KB
MD5

7dcae3de26d219720b9ceb9af6d2ca08
SHA1

a93b53115c9d39ab0ad57085b165859d5e9fcb53
SHA256

549eb886be64ac9d6d2817575f5d0d0f46c0c5602fedd29aa561ab3f05e3349e
SHA512

94058dd9930d8a136c7bd6b3d1e2e79e838863130378293b58d1bd9e8518a820e4df3be326883d8ef25e536f539613fa9882a0c097f121caf1fcaaa7263fc33e
SSDEEP

6144:bZCxQ/z7jwgvZKr7xaxvAu+9wRHlMQNHbhUdmWyPMLCy:GsPvZSovz2wllMq7udmW3Cy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
549eb886be64ac9d6d2817575f5d0d0f46c0c5602fedd29aa561ab3f05e3349e

Files

549eb886be64ac9d6d2817575f5d0d0f46c0c5602fedd29aa561ab3f05e3349e
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Dragbolt
DllCanUnloadNow
Sigaultian
Nondesignate
DllGetClassObject
Franklinite
Indissolvability
DllRegisterServer
Triangula
Uncrannied
Quarterland
Erringly
Microliter
DllUnregisterServer
Superstandard
Nudibranchiate
Pronephric
Blaubok

Sections

.text
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ