152ddbe67288363a5bbbb711e3dea256 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152ddbe67288363a5bbbb711e3dea256
Size

36KB
MD5

152ddbe67288363a5bbbb711e3dea256
SHA1

65b58d21286e536f43e287369479b435ca1d61fa
SHA256

25d54d77a35277314d91a9a9623a2f88466572ab1e333af3c3da8f1c3fdc8465
SHA512

1ee776669274471099d235c72ea1e27bc544bf87c5a69524be9a7dac5d2e586e16d22402840d066409798e342d056b382e884be1cb13fa88324315e0a9405d7d
SSDEEP

384:U63e3/QH4tK4LsUlvmi3opjkSiVQzb6ouHl3rlVnrm6JRUAaIIHRO5WvN+a:j3I/QHf9BU67zabCIwRO5WvNl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152ddbe67288363a5bbbb711e3dea256

Files

152ddbe67288363a5bbbb711e3dea256
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds

Sections

CODE
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ