2194c90d116a6da5dd644f3d71f6aa95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2194c90d116a6da5dd644f3d71f6aa95
Size

217KB
MD5

2194c90d116a6da5dd644f3d71f6aa95
SHA1

b5ab21a7acfa1b53ea78ea512d0aac27b897f00e
SHA256

584a17478b2d518b6ff67a5b255966d1302ce84667425b04ce58e3979d5cfb24
SHA512

9410dee10810d68a668a410c18d6081ec87bcb4218b4c533e45b9e9fb7f5e4b65e243d938c15c0ef5984cd82d890ef7307b2934a3cb90798ceeaa9b64b5a861c
SSDEEP

3072:OVFriUsVFriUsVFriUsVFriUsVFriUsVFriUsVFriU:yriRriRriRriRriRriRri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2194c90d116a6da5dd644f3d71f6aa95

Files

2194c90d116a6da5dd644f3d71f6aa95
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ