04a2eba9aa3c724fc1774d1f8a187866 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a2eba9aa3c724fc1774d1f8a187866
Size

60KB
MD5

04a2eba9aa3c724fc1774d1f8a187866
SHA1

638fab775caa5e83d5ae93c9b376358cbd2f150e
SHA256

ea7fb8112ec882b74ae914b6ac94ed7da0f38e6bbe8eb10a93dc4f2837e84a00
SHA512

ab9176c040ff78178e55b5479add5165807643a1691b9ac48301e19ec407c637f403e891e6de3fa6624de79cae4971087585182c4c9356be80b8834f0ee058b4
SSDEEP

1536:lOmJe4bK9x1fubb7UjwD2mdt0zdl0yIT65SIA9HjRT:YmJe2m1fWbyy0b0y5SfHjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a2eba9aa3c724fc1774d1f8a187866

Files

04a2eba9aa3c724fc1774d1f8a187866
.dll windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

??RnsCreateInstanceByCID@@UBEIABUnsID@@PAPAX@Z
??RnsCreateInstanceByContractID@@UBEIABUnsID@@PAPAX@Z
??RnsCreateInstanceFromFactory@@UBEIABUnsID@@PAPAX@Z
??RnsGetClassObjectByCID@@UBEIABUnsID@@PAPAX@Z
??RnsGetClassObjectByContractID@@UBEIABUnsID@@PAPAX@Z
NSGetModule

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE