1f6cf382d04b67ca314ac371cffb88fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f6cf382d04b67ca314ac371cffb88fa
Size

862KB
MD5

1f6cf382d04b67ca314ac371cffb88fa
SHA1

6583811823e591dec7191ccb2f47185130b130f5
SHA256

bdd256e93b3a45af9071d46668a3e5fe71594a8db7ca77e7b54793e5ee49d608
SHA512

0c8a8ca7f15c89921a100c36f99b14098d52dc430ffbb68aa82e82ee2fc7db810d5313dfac1f4b3268a7200d0d45f24a964a9a0d37423b86709f8f0765b5dd45
SSDEEP

12288:ENU5larNWpwmZpS1MUSsPhXklKQWprNoLvDZRnX/2RbImjd71W7yfz7:4GyNVGpRoRkF6rNovZRnX/2Rx7Wef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f6cf382d04b67ca314ac371cffb88fa

Files

1f6cf382d04b67ca314ac371cffb88fa
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
ServiceMain

Sections

CODE
Size: 410KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ