293c0d0b84c9f748ded4d7efc28ee8af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

293c0d0b84c9f748ded4d7efc28ee8af
Size

49KB
MD5

293c0d0b84c9f748ded4d7efc28ee8af
SHA1

b57e16d059641698262f06be1d1c31637cdc739e
SHA256

94b32d79d5a416500cc263135a537729c4fc49b1907846138b6fc562626fed99
SHA512

35331474ea18bd600405c478e807b2ddb4a705d5e8bd902701336ceb8c8574205ecaa59e2c465b2412645671873289ff44f95208d87090860894cc0ac9fdfdfd
SSDEEP

768:cg3QKMJJB0EmaAnzAYT47DGvYyMCqGg3QJQ/tQjj6j7rdqjkre:cPEaAzBTkGgynwtQjsNv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
293c0d0b84c9f748ded4d7efc28ee8af

Files

293c0d0b84c9f748ded4d7efc28ee8af
.dll regsvr32 windows:4 windows x86 arch:x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 25KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE