049c91ad971a33333bca03520c8b8849 | Triage

Sharing

General

Target

049c91ad971a33333bca03520c8b8849
Size

29KB
MD5

049c91ad971a33333bca03520c8b8849
SHA1

7c5e1a0155829d80166e3292d90a3f80054cd850
SHA256

e2cbfa50bae7d5d869e4a41170c64c6fa2938ab0686b500579acf41ac49bdc3e
SHA512

f83e95b207692c2d565735a4f03b9593f60955c58fd73e24868d0aaf78220af45af336aa6d8face0e4d7a634b51431d00e4a5d602138c2311b421dc5534f3e02
SSDEEP

384:qNNe06t9hcIgly3ZNDBhb1e6hKtGEaxGnH/qoDte8+Jg8WIHa96Z:eeP9hdhKtGgH/6lBWwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049c91ad971a33333bca03520c8b8849

Files

049c91ad971a33333bca03520c8b8849
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHjkFdSa

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ