1dbb1601790bea1ae7d57ce403057460 | Triage

Sharing

General

Target

1dbb1601790bea1ae7d57ce403057460
Size

557KB
MD5

1dbb1601790bea1ae7d57ce403057460
SHA1

bd031863d9522b4aa073444569eedb6f6829d6d7
SHA256

70ff2e6e3b82fc5f9fc5e5030051588d65965542c5b9c3ff6d2961f05f6e7973
SHA512

085b000faac59a98ce10f0c39adafe20e6a4fc3b3686c030113d60e212953eb054d40c1b3618a56a491117e1e3cbd4782e00f82851f502b8eedf7daf89867c2c
SSDEEP

12288:bM0t9FNcxDMmfrLAF8rZIRf2MmsX4eTJTLwmh0:BtjNcXnVInv4edjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dbb1601790bea1ae7d57ce403057460

Files

1dbb1601790bea1ae7d57ce403057460
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 486KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ