20449ac73dda3fe90872c3946f636de5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20449ac73dda3fe90872c3946f636de5
Size

88KB
MD5

20449ac73dda3fe90872c3946f636de5
SHA1

33351b32d51637ec199ff85a9aeef168745a8b31
SHA256

c1327095c1f981f34c1a59b7cf2cb471c429fdddd827e17942f3a5f4d5348eb3
SHA512

2d723eeb80c9ace445a6c85f8f89bc500875f7ce6071dd2a2e2ef7f02f2a591f79f5a7bf4d2281a2129de00e1f3424287e99ef23ca89a76a66367c8596195977
SSDEEP

1536:GklZj14nonv8VnbcKpndVuGMknUK8YYl1LLwJeVE1yQS5OF:Hlx14nonUVPdyl1YkVE1yQS5OF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20449ac73dda3fe90872c3946f636de5

Files

20449ac73dda3fe90872c3946f636de5
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ