2b1509963551670ba7745e869ddeaad1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b1509963551670ba7745e869ddeaad1
Size

259KB
MD5

2b1509963551670ba7745e869ddeaad1
SHA1

a292f0fd9eb205b17f5a2a46b9c7746489fc6ba9
SHA256

4fc7b60f502a45a2b50ab046826fcf7a32755cd5291c62acfc10305ed485e220
SHA512

a7e3a6d8b5a63e3ed52ecc98c06974ee1c9f74166c0dd849b57d16db5acc22a3bc8c6af90baad68df568df373515d610033c4c33cb88f566a612291e82163cb6
SSDEEP

6144:1sLXa3qVM4sLXa3qVM4sLXa3qVM4sLXa3qVM4sLXa3qVM4sLXa3qVM4sLXa3qVM:1CXa3qJCXa3qJCXa3qJCXa3qJCXa3qJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b1509963551670ba7745e869ddeaad1

Files

2b1509963551670ba7745e869ddeaad1
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ