06cdd24cff0011be260a791126f4e969 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06cdd24cff0011be260a791126f4e969
Size

172KB
MD5

06cdd24cff0011be260a791126f4e969
SHA1

2421456dde0b91e880f8836cc37049a0dfc4b484
SHA256

8acf7dbefabbd1d1cf9c846595cade95ddd374d57b47685a6740a62cf5194d8f
SHA512

305bb96fbd0e37006209f42c1335fa7c572080766fd60d04bb3b5cd8f72eead9dd97a5ac821d8778ac49a462a95aafdd24b73d3516c105e11bca56f98655c483
SSDEEP

3072:zUzgbMRkPUzgbMRkPUzgbMRkPUzgbMRkPUzgbMRk:Izgb+zgb+zgb+zgb+zgb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06cdd24cff0011be260a791126f4e969

Files

06cdd24cff0011be260a791126f4e969
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ