5ff9b0ca94b3a48e3658e4062fe4fbb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ff9b0ca94b3a48e3658e4062fe4fbb8
Size

219KB
MD5

5ff9b0ca94b3a48e3658e4062fe4fbb8
SHA1

e8923b77eaaf65c1b7e13b80427c85acf4b80adf
SHA256

cd50533eb9ca378fab4f5fcda2e1baf105a6bfb1ebb8847249fea6097a0a2a8f
SHA512

d4d8cdedffbd0b8bfd4e366afc3ab3307e7bad9d90dd57c2aad43bdbc1e95a5f878cc8be1ab3cff225b8249a782eee9b02d9bf724a50615d1e993faa2cdff089
SSDEEP

1536:coeLHmdoeLHmdoeLHmdoeLHmdoeLHmdoeLHm:TeLGGeLGGeLGGeLGGeLGGeLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ff9b0ca94b3a48e3658e4062fe4fbb8

Files

5ff9b0ca94b3a48e3658e4062fe4fbb8
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ