6e04544da187767b874ec8d99bc16d22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e04544da187767b874ec8d99bc16d22
Size

606KB
MD5

6e04544da187767b874ec8d99bc16d22
SHA1

72f62032c9b0f57687174c50c5d2f64f7562e106
SHA256

e19f864b665b8e5f26db864b2d4844546e2ae8c8c7efeb67e689b6303ce80b49
SHA512

f153d93d3c1974e9272eb398eb413e121f0bfd968e4ce5f6560448fc1bca7c445eafc6d8a8e344d0fa26247eb1b7b964a41d4823ad397e13692fbc91cef41823
SSDEEP

12288:/dUXYC8MJH4nrGPP6oH/srAvNObzyhLPH2aylsf78sr8H7y0TJzs:/moCHJnnDHJvszyh6DYA3y0T9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e04544da187767b874ec8d99bc16d22

Files

6e04544da187767b874ec8d99bc16d22
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ