13a0e72d00c2a98afe0a13685ec9aad2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a0e72d00c2a98afe0a13685ec9aad2
Size

50KB
MD5

13a0e72d00c2a98afe0a13685ec9aad2
SHA1

bd4cf9a02c0dda2731559b0abe809ebc268484a3
SHA256

77becab9c5aee94c5d5364a1adf29c72d0a3809cc322a3ae4850613f1fbf0d41
SHA512

64df902e8fb7a58dfb3bc7dc487a9d63b296218430edcde11e8842b12b4f4f1c2a081fbfbd4d6354b60aadd78ef9983a9200048c2b9100dbab53c3252f8ba5c7
SSDEEP

192:tvLcPTAwIkSF/vOMDXknTvSyKIogGPDAzsn:tYPErt5iKbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a0e72d00c2a98afe0a13685ec9aad2

Files

13a0e72d00c2a98afe0a13685ec9aad2
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 71KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ