6d4ef74713d825e819d4b4705067d80f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d4ef74713d825e819d4b4705067d80f
Size

588KB
MD5

6d4ef74713d825e819d4b4705067d80f
SHA1

00600394eddc7594f648ed8e3a7ec8322fb00f1f
SHA256

71f43ee4db88056b9ee75f72e1d04d80f151e3b2ba3c9bdecd94db5309abb506
SHA512

9c82acb03fcc57048e968926be94225c7f5dcc0db79cc6a8c87a4b4c2e43e73ab5a0dcac3b1ec1feaa52d66ce6ce062946c128e9407153e09a537e468dd9d37c
SSDEEP

12288:8Qhw5Mly0qlfc0KjqIYeGW/b5pFesg2NJyOR+zFA:8gCMWlk0K+NwDs2+OR6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d4ef74713d825e819d4b4705067d80f

Files

6d4ef74713d825e819d4b4705067d80f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ