36ac77701247b318def3259b8b7f27e6 | Triage

Sharing

General

Target

36ac77701247b318def3259b8b7f27e6
Size

561KB
MD5

36ac77701247b318def3259b8b7f27e6
SHA1

b2e057e750216dd1ec5419d2c25b0c6d2f330b8c
SHA256

2849231a75cb3859088ffbd04ab36c53e96a26c4a56a311654d13ef07d560614
SHA512

e66b788718907f0ecdf91cdb928806947bd095b2a1ab4e1ab9681b2e8441691f1d88b9308de2c984ad316778c950bf2a22f05777922ee83fe4171ea973375687
SSDEEP

12288:+gUV94y09yxH1az44i2JiU5VVNIUOZH5bMhQVW9j29:CVGy0E04wskIZHGGsj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36ac77701247b318def3259b8b7f27e6

Files

36ac77701247b318def3259b8b7f27e6
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ