25558b3b26d8af59a792e0ffd9d4cc5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25558b3b26d8af59a792e0ffd9d4cc5c
Size

608KB
MD5

25558b3b26d8af59a792e0ffd9d4cc5c
SHA1

4e829feaa382c8274cbc4137196f7bb890746470
SHA256

e96f2c4a3c54703d109f64333a235891c3badabb8582f088e638ed7b9caf4d20
SHA512

0379b98cf0c7f34e5735941f2e7660f065d2f73648fe21d122c94c51a2fa6847c0f4e01a4a2bd74d34f2dc0f1346f418250abd4542b402687fd32348d0bb7f65
SSDEEP

12288:iVYysM5Ic4nrmfCovMbgPNeLzCR7PH2qiFMf/8sreRaRwsYU:iKy35I4zpPszCRqj40ZRaRwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25558b3b26d8af59a792e0ffd9d4cc5c

Files

25558b3b26d8af59a792e0ffd9d4cc5c
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ