0105b155f041397978ba9eb3d7b1e717 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0105b155f041397978ba9eb3d7b1e717
Size

18KB
MD5

0105b155f041397978ba9eb3d7b1e717
SHA1

25bcf8fc1fdeb56f2c1f3ddea8e0b530f251bdb1
SHA256

908d8f01deeabe98d50954147f7510fac94882d22dd31c83a887e33791b998f3
SHA512

e26d22f268ba4639c55140a9263270351bbf77638f421ad8b9603af47fd91a848af054965cf46a4784d8f331797dc206c3d2e3354d893d772ad0d69c7487bd68
SSDEEP

384:8WWTEcWYe6aAWiMiu7ABKG/2g2vWJTZI7zo2iRE0jJQXx6+MVBT7bTJlyiXB:Xae6asexcAWFU2WkJQBbMvfvxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0105b155f041397978ba9eb3d7b1e717

Files

0105b155f041397978ba9eb3d7b1e717
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE