c4adb41d7e91c8a0e3380889f7ce88e9fb805f5cb3ee7def0459266d0a70e005 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4adb41d7e91c8a0e3380889f7ce88e9fb805f5cb3ee7def0459266d0a70e005
Size

5.5MB
MD5

c61c70c3cb081a607e0a664ba26ca46f
SHA1

42603fe1ac46a73ea6fc8999ce02e5d171daf295
SHA256

c4adb41d7e91c8a0e3380889f7ce88e9fb805f5cb3ee7def0459266d0a70e005
SHA512

5470f27afa0a1a2bcfd7cffe25fea6dd54c9616cd25102bd5a360ce5fe945e26916ce768946e8321e9b67f929fb73a35f16a2c1e0c5a098f7bc723a9cc43f0fc
SSDEEP

98304:ohu/Kbl3IPwCc2g3NcawhCrTVhJ7mbi18ktR60f5BY29:iu/KblR2g3t9HjpgU8ktR60f5mG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4adb41d7e91c8a0e3380889f7ce88e9fb805f5cb3ee7def0459266d0a70e005

Files

c4adb41d7e91c8a0e3380889f7ce88e9fb805f5cb3ee7def0459266d0a70e005
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.4MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE