f90fec011b41c7fba5e89e9ad5875f22 | Triage

Sharing

General

Target

f90fec011b41c7fba5e89e9ad5875f22
Size

179KB
MD5

f90fec011b41c7fba5e89e9ad5875f22
SHA1

35616cbca6bc7c685ba2ac870f08f640051264d3
SHA256

2040b79e5f10a94c8f60f25fd83df82ad3c7c38aa29733877da7006b705e2d7f
SHA512

4e5db63400c43b2560f5848418fea970b2fd9398726d5c4e4a055f5790e6fd73a775b5ff6e6f8ebb1f5c0ff63762414b347dbdf2598d62e0c09ac6be7c35f4a6
SSDEEP

3072:JsdGIHG5KOzB3+dtjSc9bwD5eLYNREzX4XUTiOCejkc3OzTvAT:WVS1itjSc05mE6zXNTiOV3O3vAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90fec011b41c7fba5e89e9ad5875f22

Files

f90fec011b41c7fba5e89e9ad5875f22
.dll regsvr32 windows:4 windows x86 arch:x86

529eec90942b849c7b88958663d3d3ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ