0x0008000000015ca8-114 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0x0008000000015ca8-114
Size

122KB
MD5

ce722d70391c98871ae784f08d27dae3
SHA1

67a0bf92dd97e092cb685d485047ed538cbb16fd
SHA256

6e89d7eedc4088f1bcdf45171c41deb6c778e14141802c153496550f09b85fb7
SHA512

0222ce1b212ec518eed7ec4ed77a2b0ea716df20a7c742ecde8b7f2cd87550c005dd4c703dfdd9611476b7ad61f4e56d1bae5fbe114827cd19333f37470d531b
SSDEEP

1536:lexMqqGFcVLAGOVb2qUmP65zEp78fdZqbswvQB4yy/ThWnoILxyiTX97HqNq7hPD:pE8uFek8dhjSF+SIuW+kaIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x0008000000015ca8-114

Files

0x0008000000015ca8-114
.dll regsvr32 windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLastFailureAsHRESULT
HRESULTFromNTSTATUS
SxTracerDebuggerBreak
SxTracerGetThreadContextDebug
SxTracerGetThreadContextRetail
SxTracerShouldTrackFailure
Win32FromHRESULT
Win32FromNTSTATUS

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ