257f31a62310d8bac036b3df3350e936 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

257f31a62310d8bac036b3df3350e936
Size

588KB
MD5

257f31a62310d8bac036b3df3350e936
SHA1

460c4009e97a2f0f34979ef3a40253c61d98005d
SHA256

cfe0ad93aac723ce4e2b03da7857b1cfab1ed8fcd9c006058eb25ea858a00373
SHA512

cda8a46e1b9cea61f0ba61e8bb44ef0e345a3087d717147bfc8fdc5a38c3a98c2b78378182d62c37fd7b6faae8bf939107108b43feed9000cea854f39c7e0a25
SSDEEP

12288:HFUh/31cUzL7JHMe6xpHzeE0m4NR6AiwlVlSZggx9:H2l3PzL7JsvniGAi2zPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257f31a62310d8bac036b3df3350e936

Files

257f31a62310d8bac036b3df3350e936
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ