14e5570da0c1f8cb784d05e72c764e0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e5570da0c1f8cb784d05e72c764e0c
Size

555KB
MD5

14e5570da0c1f8cb784d05e72c764e0c
SHA1

66bb41145f90a0bb82ed7309157dec0f0aa7a5f5
SHA256

536429752b193d7c4abadb2b098e3878077404591972df0fc7387e61afe90730
SHA512

7ffe6d71b064cb436fc13ffc9a6c3714273db1c36f0f54cedaea76bcf5a66a5450215b3f824ea969455aec452970e0a45db4fd4458fcf092f4b70a0a33e45c6a
SSDEEP

12288:a0Et9YDc5DMWfT44XUDxoyiD02sHtaijbChehch:qtWDc/EXouPtfPC4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e5570da0c1f8cb784d05e72c764e0c

Files

14e5570da0c1f8cb784d05e72c764e0c
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ