2d77efdf0be9169badcc3d7a08b76cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d77efdf0be9169badcc3d7a08b76cf1
Size

47KB
MD5

2d77efdf0be9169badcc3d7a08b76cf1
SHA1

8fe9e4368a66290c06b79016a1bc1905e30e1398
SHA256

31024ade7c0c25234c6aae46dc23eef724f9367f02b2c9d945b89883a29ab136
SHA512

cd4a75178dbe96b5c44d9afcfe05f63aa16f6e77ab6b5886755e6d59640959b069fa92f1bd9f6e89490f0bb448767c962b506564c7dd30a660f3a7528732805a
SSDEEP

768:5A6qj9AiXntrYVQD+FpCu/Zl5kxAv6fg8lnbKt6TFNgtaFTuc3Jw8Vq55u:e6GAmnNAQDibnGTlnFNnScZ1wW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d77efdf0be9169badcc3d7a08b76cf1

Files

2d77efdf0be9169badcc3d7a08b76cf1
.dll regsvr32 windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 37KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE