20ef69fed55631929043069929d3942d | Triage

Sharing

General

Target

20ef69fed55631929043069929d3942d
Size

220KB
MD5

20ef69fed55631929043069929d3942d
SHA1

d2230b3cc2a7074a8a8369bf1b0243d5682051e5
SHA256

09173c7c7f111d160d942b7b3dce6ab1a9d224bca5a87b585d53e1430035a4dd
SHA512

cb5a8280dc1c0a810977d850891ba75eb175871c5a0daaa6b3f60ffb6cc966d6c105f931625deb59e267b09bc253ab805a32dbdcecd94a37d95e29c1b6dcf87a
SSDEEP

6144:Dr7Xs4VbYr7Xs4VbYr7Xs4VbYr7Xs4VbYr7Xs4VbYr7Xs4VbYr7Xs4Vb:Dr7XsRr7XsRr7XsRr7XsRr7XsRr7XsR0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20ef69fed55631929043069929d3942d

Files

20ef69fed55631929043069929d3942d
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ