16ffec61486ec654cdecb7a9af26b7ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ffec61486ec654cdecb7a9af26b7ab
Size

164KB
MD5

16ffec61486ec654cdecb7a9af26b7ab
SHA1

318b5bab6986350c2736a7a7c51d19e959a2f977
SHA256

1b9969e6425a75484d58adaca8a506c297be3f51f1f456e962db6e21cde9c522
SHA512

f0819d21fa87c59069d7f5164a76364f17359454d76bacf67303aa71eec89d86f569f2435c08d7fcf752ceaff7c7d5e1ad4e1bf3eee51176493f9312c182c612
SSDEEP

3072:F6L8zQ+rmls2evKpeNoKfxDb2iSqCYwEAYHOTkPjaPqNQD2:1+EKpeNoKR2iSYwEAz4jaPqN3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16ffec61486ec654cdecb7a9af26b7ab

Files

16ffec61486ec654cdecb7a9af26b7ab
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstantAccess
OpenAccess
ecnhe
eswhe
euhwe
iedisco

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ