dc9aace6708c818d1bfa0922ae7d25924f72449f2a8e19a1962b7453c4b3ba66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc9aace6708c818d1bfa0922ae7d25924f72449f2a8e19a1962b7453c4b3ba66
Size

976KB
MD5

696e921c0031fdea0d5dd0a7df34a92d
SHA1

36e7acc64d0661c1daa0c35ca36d9bd4578c5019
SHA256

dc9aace6708c818d1bfa0922ae7d25924f72449f2a8e19a1962b7453c4b3ba66
SHA512

fd61164d29a37e106d3a3718781141e95ec01add95c881db591d977c098ffdd36c0e057f56df4ae6927ca7e11bdad474122a0690b68adc3c8a695c2d87ca18c3
SSDEEP

24576:5hjjjX5HY1qMN4oqzUzoUdQMtPWcvWLVgdMqu8jQd/CTZw:5hzpHSjMJSW2u8jQdKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9aace6708c818d1bfa0922ae7d25924f72449f2a8e19a1962b7453c4b3ba66

Files

dc9aace6708c818d1bfa0922ae7d25924f72449f2a8e19a1962b7453c4b3ba66
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 832KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ