1df99b662803b27b9714d7d71ca40cba | Triage

Sharing

General

Target

1df99b662803b27b9714d7d71ca40cba
Size

29KB
MD5

1df99b662803b27b9714d7d71ca40cba
SHA1

3e0ce02db4fd6cc2983529d16a3bda8440785c4b
SHA256

484bb4f6eba3b59090f78accf411dd6683acabb7716cf439a3b3e94f3aea2d8b
SHA512

fd395cafba219795a6b0af32f6fed4076a705917bed2a7a6bedcd1038ba3c58271e07d10a17d202b3cbed1d3b1305184cca34157ec456782a5baeaf171877c6a
SSDEEP

768:XKSUquI80GQsWegUGpDrlyo/2CWtcz479ZQ6:tUquI80GQpUGtrlHctczG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1df99b662803b27b9714d7d71ca40cba

Files

1df99b662803b27b9714d7d71ca40cba
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ