101220674a1ccc8aae0d540f7dbb1874 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

101220674a1ccc8aae0d540f7dbb1874
Size

112KB
MD5

101220674a1ccc8aae0d540f7dbb1874
SHA1

8c2e55e2820de9c708e404eb686f28dce1660ca1
SHA256

6c2b76d844f2aece03f4f24002c51bc465ad54ffc8fa97dd4e4c7b072e59c098
SHA512

1ea1262b0d39a4bd8a166be8288b20197d62566cc825f02b327d0f93a8e7a0f50dd28c8b0adf6ea85a14a23d9dd032a296af698d86d02aec8f41866b3cf4a5e1
SSDEEP

1536:c71quQpzhdtCVa5yxrw1JjVX3vBbkZQ7:Sczp5yBw1H3pgM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101220674a1ccc8aae0d540f7dbb1874

Files

101220674a1ccc8aae0d540f7dbb1874
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE