0240b6ad4d29f3c4975278e567c209b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0240b6ad4d29f3c4975278e567c209b0
Size

215KB
MD5

0240b6ad4d29f3c4975278e567c209b0
SHA1

ee55443a09fcebe27b3f307178cd22edbab9efba
SHA256

c97309827158f93dbb9d267341758da9b7b6ede5e306d72a469806c3ee0b1375
SHA512

43853f0d8111cf6d6fb5a4d7f9a17596b0a97e1e2e690c63d46513496fcdeaa93f8ad686d6c866b05e560b5e862718f2bb3ad1774175a5b80371c8400c031acd
SSDEEP

3072:s6cYZeZv9WDfm+oITW0GrT0/8RMsmaOuiYWIbq8CTzHOJs1XQpgBFsewHLXo:s6EwoWBUACzmj1gsy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0240b6ad4d29f3c4975278e567c209b0

Files

0240b6ad4d29f3c4975278e567c209b0
.dll regsvr32 windows:6 windows x64 arch:x64

e6019496b12f5e1405335a7e52aa06ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetSystemTime
GetProcAddress

Exports

Exports

DllGetClassObject
DllRegisterServer
HkjjiqvdHcpsddoxMizzfv
HxuplsdXwomsoys
PluginInit
UtjlfalkNuoclEchbbvq
ZltejpwnewfqxkZdfywrrxpksxs

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ