4e8759477a9ae13ef45eddc13771829f | Triage

Sharing

General

Target

4e8759477a9ae13ef45eddc13771829f
Size

618KB
MD5

4e8759477a9ae13ef45eddc13771829f
SHA1

3feb3fec04cc994f1e449ef1e85209e50cd07e3b
SHA256

e87467e1eebb11dba060d4e897bb1c1c46edc551acb42a7089611655d55feaa1
SHA512

41478548dc5978f8a0d7c72a89738b3c1899235f3fc0bef926342d8ce8244d3b7023d8253ba321b1264cbec88021f5bc5b22f95baec3094d801b5fbbe48f2d1f
SSDEEP

12288:42IKPCIuQgh9ZTVkfE9OWjVzE6qRHRbI/Tg/nQ7l5YCGmvu6ub/:43KKIs1adCEPu/Tg/nAn/vu6ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e8759477a9ae13ef45eddc13771829f

Files

4e8759477a9ae13ef45eddc13771829f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ