0985c2e4ba31c4eb6d39c0cb476e34f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0985c2e4ba31c4eb6d39c0cb476e34f5
Size

452KB
MD5

0985c2e4ba31c4eb6d39c0cb476e34f5
SHA1

33b13735919c828ff72b992432fe56d3e2d0944a
SHA256

6a58b534a4c632af71325b69429b923d9fe7267b77f7fb6b38206f61522940e9
SHA512

a64c8028d91e664c3dbcf9165f0d29b5c4f26912eabc26cfaaa818466820fe5db176e69fdb5607081fb1c8a14a6a1cc0da7aad4411720e05958958569201f33b
SSDEEP

12288:/ZH41GrPVlzARC3EsBWvO7bef2rnGbcUrmiHZPwiJYQTrvq:/ZcRC0qba2rnGprmiRRLTri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0985c2e4ba31c4eb6d39c0cb476e34f5

Files

0985c2e4ba31c4eb6d39c0cb476e34f5
.dll regsvr32 windows:5 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ