61ab1e22b3ed58c3ba3fb73d2837d0da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61ab1e22b3ed58c3ba3fb73d2837d0da
Size

462KB
MD5

61ab1e22b3ed58c3ba3fb73d2837d0da
SHA1

07efffea452e4f9b6d60b237d313dca46f613ae3
SHA256

2744fc863b63d6a320b87515804dae64090ed886297050aad8cbab374ccf3e95
SHA512

7d677b807f1b7bf04ab209dee2e89b9e4bfe9993b87326433f729666581a7c46e14406a3e406d4e2d1ea386c8dc02b51b83d54b3e0210ba121b04fbe3009b943
SSDEEP

6144:7bVPXLakbTqht5o+nKivd8Z4sPYwp4KltOzlZRMCKy6fcWWHDecHAI3C+8hkBB:db4DmavdW4svpLtmRlKMHDuIycB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61ab1e22b3ed58c3ba3fb73d2837d0da

Files

61ab1e22b3ed58c3ba3fb73d2837d0da
.dll regsvr32 windows:6 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

DllRegisterServer

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ