0226fba8da8cf28fe3921c8ab6eeb274 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0226fba8da8cf28fe3921c8ab6eeb274
Size

155KB
MD5

0226fba8da8cf28fe3921c8ab6eeb274
SHA1

4d07bc837c460b5982b11b3f15bd64b6ea3e2b75
SHA256

5b49fee0ff40c3f4c4d21113007c11bb7f13880f0b4a4c7229e4756d68b2dfef
SHA512

c5ea474b5bdbc3cecc9945afd13b8614f196c2818471261c195297e5fabfb4d1f81ab18aa46d97baf76af62edece32c1e7bfd244fa3ee573a4e1e223cceef615
SSDEEP

3072:8KapEBwCqr4qmWGvFtfP4cMXV1nZIYQpxMxgWUhwNTW:8KEEyxr4IOtfeRgJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0226fba8da8cf28fe3921c8ab6eeb274

Files

0226fba8da8cf28fe3921c8ab6eeb274
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadFunc
LoadLib
Unload
Update

Sections

CODE
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ