16eec0f7767c65d81a142984c2cc1067 | Triage

Sharing

General

Target

16eec0f7767c65d81a142984c2cc1067
Size

172KB
MD5

16eec0f7767c65d81a142984c2cc1067
SHA1

35c575f206fe5862ac77241659194c42f0fe45fc
SHA256

ca8a066ef5fe9a46111217d99b2e72b5b0a46aec23f2700f5a5f30921330f910
SHA512

eac8c11f709ac762d061f57d820cea54dc164774d94e4a3d456a5010caf29922c611530daa801a0b65f54bff7dcdc205c193b26668bf6deb45fbb191c63b8081
SSDEEP

3072:fzMppQjgsbzMppQjgsbzMppQjgsbzMppQjgsbzMppQjgs:7MppQjg6MppQjg6MppQjg6MppQjg6MpN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16eec0f7767c65d81a142984c2cc1067

Files

16eec0f7767c65d81a142984c2cc1067
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
yjgdtc

Sections

CODE
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ