305261111b7811097641aba512e6b14a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305261111b7811097641aba512e6b14a
Size

146KB
MD5

305261111b7811097641aba512e6b14a
SHA1

2e667534af696b7f3de0e48cc7e5bc984475d5bd
SHA256

22f98d48791a43d901be9a746787e4f1cdf47d3c0959c58cfb2ba12eaee487fb
SHA512

f0b5c84ff39e86c6b4994343829335cf7289b0ec7e9ce7a29d4515555a1f40ad700a7a9972da006c5ba735b6c60af6457c220d6dbe2bf890732d7d7ae897e2a9
SSDEEP

3072:oPbqUbxTDmg429ClfeQdUCLMFStL7LrGALkimZ/wErOekrQkx0l9:oPWihDn4+Cl7ZMFqMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305261111b7811097641aba512e6b14a

Files

305261111b7811097641aba512e6b14a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IFileDescriptor

Sections

CODE
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ