12ef56b7c982bc35b8eacc342f74f086 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ef56b7c982bc35b8eacc342f74f086
Size

220KB
MD5

12ef56b7c982bc35b8eacc342f74f086
SHA1

daf99d467bbeace020f605d544d87dc9737cfa46
SHA256

f132a835a7a6b35481c6b308dc447d8052310dae2b4cacbdd48df15e9fce08b4
SHA512

bfab5b381198d1ca0bdc95921c08426a65b329cadd21f768f2012a04323ed2f7d6f51cdc0b69a3a13fcd9cfaa26cddfff8e8ca5615493554ad95d8c9d69c6c0e
SSDEEP

3072:QgtT/jr8y6hX2XMTuuhh0vxus5NaZoEm1DiB6s1To+k13dOtC+QPxj1D/my/Y3Vg:QisJhXsSh08cqoEMQNoSy/Ygv1BSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ef56b7c982bc35b8eacc342f74f086

Files

12ef56b7c982bc35b8eacc342f74f086
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

??0ZlibEngine@@QAE@ABV0@@Z
??0ZlibEngine@@QAE@XZ
??4ZlibEngine@@QAEAAV0@ABV0@@Z
??_7ZlibEngine@@6B@
?compress@ZlibEngine@@QAEHPBD0H@Z
?decompress@ZlibEngine@@QAEHPBD0@Z
?flush_output@ZlibEngine@@IAEHXZ
?load_input@ZlibEngine@@IAEHXZ
?percent@ZlibEngine@@IAEHXZ
?progress@ZlibEngine@@MAEXH@Z
?set_abort_flag@ZlibEngine@@QAEXH@Z
?status@ZlibEngine@@MAEXPAD@Z
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ