191613145c1ee0b4ee9a5794b87ed2bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191613145c1ee0b4ee9a5794b87ed2bd
Size

206KB
MD5

191613145c1ee0b4ee9a5794b87ed2bd
SHA1

b62de9e0a321ce92dbed2945cb8afd93db7eabdf
SHA256

f38a87e9565228a3f64463fe331b678ce9e67a861cd6b5e451b0add3f8d80d47
SHA512

e63debc1452e6254931188451e99353278fcf1efa0a522b4eda6e263c0071cb2f098c6cdae408b036a9ea3357a4ed1803c96123522515f7a6237d39516b22da9
SSDEEP

1536:6kfCsv8NkfCsv8NkfCsv8NkfCsv8NkfCsv8NkfCsv8NkfCsv8:lv8av8av8av8av8av8av8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191613145c1ee0b4ee9a5794b87ed2bd

Files

191613145c1ee0b4ee9a5794b87ed2bd
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHjkFdSa

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ