20036485f008ef09a84e46c922b2c999 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20036485f008ef09a84e46c922b2c999
Size

28KB
MD5

20036485f008ef09a84e46c922b2c999
SHA1

defd31d8c2f688803e5afcf53a5bbd667d8033c7
SHA256

3cc44b7706be718fd01cf44f700070f83efcad45551312f864573e0dbf23298d
SHA512

8b773624919a17847d6eff4414581a740183eb2fbf952eb11a40099f50ec2a1f2c03fb794b4d145307ca82188462f7398f73247c9de2ff1fc0daea808c9f243e
SSDEEP

768:WKSxquONL0GQ7t8IVp2MmUckJ4/uCN8VR:ixquONL0GQ79YpUcCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20036485f008ef09a84e46c922b2c999

Files

20036485f008ef09a84e46c922b2c999
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ