0e26ec5893976af4dfc7ca4c7c1b9430 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e26ec5893976af4dfc7ca4c7c1b9430
Size

103KB
MD5

0e26ec5893976af4dfc7ca4c7c1b9430
SHA1

a2f0ab2e3d71e62c21887431a21e6e3b108aefb8
SHA256

f8e19a2b956bf067e63d3a0bc01a071acd3157dd07f23e747190f43edb951999
SHA512

e4c039f3e013fe3e0df003bb788f61ba5f0e0e48051a3492b624fb47bcf858160201443a7428b0030f1681f491e1bc266be8c6012257c9938a9010006c0c2809
SSDEEP

3072:u1F49trjglL+6PlQhHNYr+7q8wZUx/t0fi:uXOjIJgtYr+e8OO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e26ec5893976af4dfc7ca4c7c1b9430

Files

0e26ec5893976af4dfc7ca4c7c1b9430
.dll regsvr32 windows:4 windows x86 arch:x86

dc64a23316c304889de6b61e73908a4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryExA
VerifyVersionInfoW
QueryInformationJobObject
SetCalendarInfoA
ReadFileScatter

advapi32

FreeSid

oleaut32

SysFreeString

user32

CharNextA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Pmcjllk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain

Sections

.text
Size: 99KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 224B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ