2445455331d6129f992b8c111df41f01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2445455331d6129f992b8c111df41f01
Size

607KB
MD5

2445455331d6129f992b8c111df41f01
SHA1

b0238f48e1368b62450c0408a4637ccabb377edb
SHA256

caf837045015b4fb9033fdef8583a1820ee2ae0767a89aa692ad754fb3dc2b27
SHA512

3d4a0157ed1bf66128f6c16b1f006582d3a180d3c50b506737ac6ba8235401f3ec946a8e95d86de18b66632a8f181bd81fd8b64b63321a94873d782dc57d320f
SSDEEP

12288:qpIt9HX65cspWkY5DARyLuaIg3QaoNrRm75XhCM0J/:qetFXsoB7LGnaoNrc75XT0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2445455331d6129f992b8c111df41f01

Files

2445455331d6129f992b8c111df41f01
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ