11d3b490638d0376afe3540df88a6476 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11d3b490638d0376afe3540df88a6476
Size

302KB
MD5

11d3b490638d0376afe3540df88a6476
SHA1

74aa3559e86d1af4c4b10d0465dd3f4ffcae911e
SHA256

d89f7805e56cd9ca92fad64fe15ab226e4c780b14a76f4e887d6dd62375064a8
SHA512

fda9414820a47b1d71b9df684a2ba3775bd9a7b2f9cde0efe3a65b77d656845a52f981463e45c6ab5faaf9caa25db3abbc875a347fa1ae817bb67aa1c7252341
SSDEEP

6144:KBdslFReQ7QW/YzrQ3jx0+PZbbductNSohQrS3:KBd8FCW/EUTxRbR6op

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11d3b490638d0376afe3540df88a6476

Files

11d3b490638d0376afe3540df88a6476
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllInstall
DllRegisterServer
yr0
yr1
yr2
yr3

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ