04914fc0401a92c6337d20ab50b12cb6 | Triage

Sharing

General

Target

04914fc0401a92c6337d20ab50b12cb6
Size

640KB
MD5

04914fc0401a92c6337d20ab50b12cb6
SHA1

61073d0fd3bbca3e155fc3183e252b11101ada89
SHA256

93606cea3569bcf9652bbadf913345ec8f5667572e4472a5e63463400a3e1c14
SHA512

b5f7d2d89ec98ebbd96b97cea42d7d283f071dfa15b11c087f585c28a932fea0f1cbe30ac61896c46f333e6a5608b262d625f9aae7240d4a30d0d79ff256c091
SSDEEP

12288:+0Et9YDc5DMWfT44XUDxoyiD02sHL1Q3h+g2tePm:utWDc/EXouPL1Oh+gA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04914fc0401a92c6337d20ab50b12cb6

Files

04914fc0401a92c6337d20ab50b12cb6
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ