e27fedd89db1e5be972b3b9b483c6be1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e27fedd89db1e5be972b3b9b483c6be1
Size

198KB
MD5

e27fedd89db1e5be972b3b9b483c6be1
SHA1

59382ab4ad89c7026400184be5d6c488badefa1d
SHA256

7245d0df6cc49b4e9996c32048a4a05a5049d7eda8ccc1c6d5184d7fe9d20de7
SHA512

368bb43c5ccd727e125d5c51f5c6d34e36d99f9adbde0a5c30367ffafc8d0f3843678c3982cd57de45c063e074ac98b82c78d926c82d2f877138d03c950fc01b
SSDEEP

6144:4NZlrPznJDDOCNAbDuogcCeydYtsnOpSIYA1Tsi3JGVHvuHvHDHJ:kZlrPznJDDOCNAbDqc6dRO8rA1gkJ8HM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e27fedd89db1e5be972b3b9b483c6be1

Files

e27fedd89db1e5be972b3b9b483c6be1
.dll regsvr32 windows:6 windows x64 arch:x64

5bf513a50d836eccd077f47601fe8599

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateFileA
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
Sleep
VirtualAlloc
VirtualFree
WideCharToMultiByte
LoadLibraryA
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
FgpjgxrrirdnJtbqedtswte
PauseW
ResumeW
StartW
YtojrlatspMyesrlnd

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ