15f213d384ae0282e69f1e1604dd294b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f213d384ae0282e69f1e1604dd294b
Size

35KB
MD5

15f213d384ae0282e69f1e1604dd294b
SHA1

bf344536a83953e5bfca98b5c889a0506d366d12
SHA256

a77c0bd1023298de9cf9c54b6f77cda058df68eba5f057f89fa80494305b1402
SHA512

bf5d98853639187f824658a6ffb4726afbb96230befff4462d7e7009a57d6f5ccf76c59f45b88ad9255cfc8d26a38a8a2d105e24c213b0f4bf6a82521286c469
SSDEEP

384:ag/JX0fiiTOX1XWiQGU6GCMicKXRvHQVzpvhK+UT/QJgvvr7u8v4gcAa+CHTd6Mf:hJX0fii5RGU3HicGGNoR/Qe/39o+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f213d384ae0282e69f1e1604dd294b

Files

15f213d384ae0282e69f1e1604dd294b
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ