16fecafdd0fa080a13de1e1a527d6932 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16fecafdd0fa080a13de1e1a527d6932
Size

124KB
MD5

16fecafdd0fa080a13de1e1a527d6932
SHA1

bcd838767cd46f405bd322f429e447dfdddbe257
SHA256

c8ae4ea52213b8a24be31138fa562f269395cb51f3de304443c0b51334b4c169
SHA512

172663220056e139474a8a0430bb37b06bfe5304f535862cbd07bc981bf908833c221c8b8a3bef196b20001b3c208add64547cb502489ef750261fd2ed27f021
SSDEEP

1536:bX8DfaXdy80NM9bNgEJB+DQ4Z6o759vlR7g41T9VHmHRhWGdBV3NUXBV47:D8r3sgEJB+w69L8mT9VmhfBV3NUX47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16fecafdd0fa080a13de1e1a527d6932

Files

16fecafdd0fa080a13de1e1a527d6932
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ