1e5b1ec8cb1bf2e61dd004ec5894442d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e5b1ec8cb1bf2e61dd004ec5894442d
Size

220KB
MD5

1e5b1ec8cb1bf2e61dd004ec5894442d
SHA1

65f7e08427d4ec9faf67358d643af6b005736765
SHA256

94eac50223bd92e318c8ca283a9c31192ce1d941ee68d9e6faf671f18bd4c69a
SHA512

29f3663f1e76fdacf79eaa1f14b16f23b841f198d049b987aecc50abdd39d9e758a3db10b302620f365ed63a7bca74ef4c2dd2b2127bbb5b06b0c2a17e370d89
SSDEEP

6144:qgfqnMgfqnMgfqnMgfqnMgfqnMgfqnMgfqn:qghghghghghghg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e5b1ec8cb1bf2e61dd004ec5894442d

Files

1e5b1ec8cb1bf2e61dd004ec5894442d
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ