04b0c8cf0ffd96208e14c94108da85d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04b0c8cf0ffd96208e14c94108da85d6
Size

1.5MB
MD5

04b0c8cf0ffd96208e14c94108da85d6
SHA1

ad9bbaf71aa33a5670d34c005520180d7d5eeea9
SHA256

7face9261f9519ae50a5e516ce0c24632990a1414e94606e98850ff180054036
SHA512

dfbd819c772c805b565f484c8bb72104cd758eab22a1f06807d154f871fa5a0fe64aec13103cd1885a8e0c9d1de188ac0e6ccc597527cbc84b2cb1d40cc50411
SSDEEP

24576:QASizL5UIYl1kjAgQBU/EqB0AXeFb4VdxawYeB+KL458djAlj0IJUs:/NADCAgiUxB0AqcLK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b0c8cf0ffd96208e14c94108da85d6

Files

04b0c8cf0ffd96208e14c94108da85d6
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
ServiceMain

Sections

CODE
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ