1456922354bcd0067d6ea7e5e807b6b3 | Triage

Sharing

General

Target

1456922354bcd0067d6ea7e5e807b6b3
Size

30KB
MD5

1456922354bcd0067d6ea7e5e807b6b3
SHA1

83c97c08fdc5461b949530814909388a11991e3e
SHA256

00c0a6452766ba004123794a22d70a9088bd1d3fe3e2d7f6889799ea86e76f90
SHA512

d2cd36d7084831e05583f3949c5504f12b136b60bf43ecf4639ce71e76373245f1c0a423d6a2e466be6b3181ca44e8899e55b99c714c719c46a3a54ddb86d9e3
SSDEEP

384:lNNe06t9hcisPd4wpmmizx6DRa24AtksaDTYU5m8WIHC/oqp:BeP9hnQe61aGNUlfWwb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1456922354bcd0067d6ea7e5e807b6b3

Files

1456922354bcd0067d6ea7e5e807b6b3
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ