4d98220a563414a6e9f676efd7784de3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d98220a563414a6e9f676efd7784de3
Size

92KB
MD5

4d98220a563414a6e9f676efd7784de3
SHA1

6fd3be90c6fa205bc6897cca60630a513a834982
SHA256

84262cda08209a5828a7b6a92f4ce2e63e4b74e6e5bd3037c0bc560a6de6b99c
SHA512

fd8e12be63a36112f87c2d189e3fb5d713821a48500bc863821ca67e6cb5ff2dafc4aceb2bcbfe9b431b4c10351863cc531c26874e8ad41c1d48d44f9402866c
SSDEEP

1536:GOMAnDyaR5NVTKH122CsYZrRo/smFG7XTvC+PgLXz+l:lPyaRlOgfxm/07bC+YXyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d98220a563414a6e9f676efd7784de3

Files

4d98220a563414a6e9f676efd7784de3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 59KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ