25252d242644e07ade07804eb86c8e32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25252d242644e07ade07804eb86c8e32
Size

325KB
MD5

25252d242644e07ade07804eb86c8e32
SHA1

24c2a1d25b9eb8449c37cd8c568925116966fa20
SHA256

e10d11c666bdc9ea1cf90fade67ecaf9d8fdd42d8cac1be1998e9769f5c63f9c
SHA512

10c73c212336d5f205a33397989e12a796c8a91284f75b13e1e4495a5f557ec528b4c78a2c5ed346e3c1304e6fca3743044d4e503a9e8aaad1c96840ddcded35
SSDEEP

6144:yYFxGa6+jTluQDJVoHIZ0z7PW0uet1hjdweUt7DTxzPK:yUj93VGHcey4DdY1zK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25252d242644e07ade07804eb86c8e32

Files

25252d242644e07ade07804eb86c8e32
.dll regsvr32 windows:6 windows x64 arch:x64

b211bec2627ea9b5322d60ef3ed97e1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
StartW
StopW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ