5754237238b56b66141add29a766ff5d | Triage

Sharing

General

Target

5754237238b56b66141add29a766ff5d
Size

439KB
MD5

5754237238b56b66141add29a766ff5d
SHA1

7cb47557c3bd8b6da667375bffffcd47cd07a0f3
SHA256

ad533cdfbc679aba56595dfaea0dca174bfcd8f3348fea0fb9b141c05b927b9c
SHA512

15a8a1f5751770c8b41fc71d36b49660a012d23fb616084078478d8941f76f02f6d460c7485c0d3c98dffab55c0702e304299478cb8ae12380c989c511d3d88d
SSDEEP

6144:jomALXqkDjP0M2zFLSH3qO/I8CYv8hafV2a71z6jMI0Wy+i561+n6KvNg3+O/zPl:RALXqGjP0M2zi3dhz6me1+nrvNg3fzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5754237238b56b66141add29a766ff5d

Files

5754237238b56b66141add29a766ff5d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ