109ca95e71658963b64eb5f27a5c3b58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

109ca95e71658963b64eb5f27a5c3b58
Size

30KB
MD5

109ca95e71658963b64eb5f27a5c3b58
SHA1

ebda52ac685e3f1a8865cc70f0679d67014ec89e
SHA256

89fefb37c7b774ac5ee5e09de9090c35a3306c1b37ba4107423faf8eac0a527a
SHA512

40798ea8f7848bed15532d6deb31a4dc05d2eabf4f1d0cbd68cf0fa0f4b78c49270366e430deb40d7d8c2a4e11c70e4428cf5d22dcde9e3cc518be4fb69a53fc
SSDEEP

384:cNNe06t9hcyL6DfCwsTvUYCiP2JYwLd6ppdj5G5P0lTQiu7SCo2H89qs8lWH/YVF:MeP9hOEZQx56ppPG5P0V+dBl2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109ca95e71658963b64eb5f27a5c3b58

Files

109ca95e71658963b64eb5f27a5c3b58
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ