4bddd79f59d034664951de22f711eb75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bddd79f59d034664951de22f711eb75
Size

128KB
MD5

4bddd79f59d034664951de22f711eb75
SHA1

61c469c623ea26586a9379eca44b4ab05e97b8e4
SHA256

76fe3403e7056be3fb4164fd3bc5fefcbff8fd4a860daebf30c3375caab2cc38
SHA512

81ca110703bdbd803f1a47b7ed036eb021310ac50f647aa15f889f99871d2605155c32176ef49473bbd47c3587bee797941c5aa0c0c7f30c0967d565ebaa5e9c
SSDEEP

1536:3mqvQVHXWRXjWm5YO6w9E3hy3FVhtoueZIbBj:N03WJjNuw9oo3F/CueZM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bddd79f59d034664951de22f711eb75

Files

4bddd79f59d034664951de22f711eb75
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE