261d36674e26f3e1699d417487b94a74 | Triage

Sharing

General

Target

261d36674e26f3e1699d417487b94a74
Size

126KB
MD5

261d36674e26f3e1699d417487b94a74
SHA1

bd5ae609977386d3aaed3c62b308dc01732e4d0f
SHA256

9aa4530eca55a6676274a3d154f3d11f8bf04ec00345196a31f2ca23df7cd13a
SHA512

32953eb882c660c598ccbdbaf650da7426251ee217aeb649fe9978c5c7b642f9bee84c38d2249ea0a6ec8eacfd254a40343bc2501f2f1085ddaac74039fc2e72
SSDEEP

3072:oMG/XLJdhEEQA8f6VDnF+TzWRAD6AuUJWRDMwf44VOOPH2qq9:LyBxQtIOCUJWSw9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261d36674e26f3e1699d417487b94a74

Files

261d36674e26f3e1699d417487b94a74
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ