a0b6009b59afbc0c4c0b2b3060fc5a04373d760cfbbfe8d78ba075cf0f7e9c28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0b6009b59afbc0c4c0b2b3060fc5a04373d760cfbbfe8d78ba075cf0f7e9c28
Size

5.0MB
MD5

18843d3a915f0eaf39b07aa2567bbdf8
SHA1

f26175c3a079a1f9433e0504b60049870da7e26c
SHA256

a0b6009b59afbc0c4c0b2b3060fc5a04373d760cfbbfe8d78ba075cf0f7e9c28
SHA512

01143769de225348e31db3a0fced376db2eb0d47f0a86fbd6389fc2daff77cb8804e346cfa31d1faca3993f945a7133d8ec17922052994b29d40e014477c23fa
SSDEEP

98304:yFpXmtvxzsLugPwBX9Q+WwXfnjYJ7t8ktRdmfmWl:SXmtdKc0J7t8ktRdmfpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0b6009b59afbc0c4c0b2b3060fc5a04373d760cfbbfe8d78ba075cf0f7e9c28

Files

a0b6009b59afbc0c4c0b2b3060fc5a04373d760cfbbfe8d78ba075cf0f7e9c28
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE