2902628586302a19611a5d6120221b8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2902628586302a19611a5d6120221b8d
Size

634KB
MD5

2902628586302a19611a5d6120221b8d
SHA1

d14267298f1c9597391b0d69d01ef94c9a1243d0
SHA256

ddea0615040976420309388e51a97ae68cd5a50c2be845ccf7900e2f47b3b243
SHA512

9cecd3f0978c4c407dc57773152177d62f07dd0f999e77e25f8fc2d12e97e3b20bd7a9c52253fff3e8ba47b19ff5eda9d5116ea44d9171e960026ff2fb8d9a76
SSDEEP

12288:nM0t9FNcxDMmfrLAF8rZIRf2MmsXaD712h+C/fO79s:9tjNcXnVInva4h+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2902628586302a19611a5d6120221b8d

Files

2902628586302a19611a5d6120221b8d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ