90f7760cf34d252aad162c2cdebdfebc32e94eb759b94e6d8e3080aa8f5aae5b | Triage

Sharing

General

Target

90f7760cf34d252aad162c2cdebdfebc32e94eb759b94e6d8e3080aa8f5aae5b
Size

816KB
MD5

dc10b434639f35b1b42e9d826c84cced
SHA1

ec1dad3f8d4a74bcb29f843ce0076cfa2532a092
SHA256

90f7760cf34d252aad162c2cdebdfebc32e94eb759b94e6d8e3080aa8f5aae5b
SHA512

94566f180382fb2ea4ad90914ddc310ade2e557e7ac1511392e99c4e3733ce47cb475375c9d338becfbb7e1401bad9302769f8b6b8a9db423c72d20d241c4e03
SSDEEP

24576:o3E/PR3PY6x7D00nveC6hrPIKPOLznc2TLmNrjp:PRw41nT+pO/nwjp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90f7760cf34d252aad162c2cdebdfebc32e94eb759b94e6d8e3080aa8f5aae5b

Files

90f7760cf34d252aad162c2cdebdfebc32e94eb759b94e6d8e3080aa8f5aae5b
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

A6
A7
A8
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_setopt

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 780KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 435B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 345B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ