389eacd25c14bbe93afdea77029e034b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

389eacd25c14bbe93afdea77029e034b
Size

577KB
MD5

389eacd25c14bbe93afdea77029e034b
SHA1

2b5338f9afbce336e6cba6ab9ab5accda5a2b1fc
SHA256

cc678a95b76052366bf2abd661615dab4b3b377e49758e4d055d0d26f8277508
SHA512

8f2c9b9d1ebd1ec4c801c0b386c5f12ba745e57f93ad920c7cd29c2c9a87e3abbaaebade133ecfd450c9565e942b80ff5f71675954f2ca03029af1fbadb1f3cf
SSDEEP

12288:s1NSzB060hmFPyiOQTfkZNDv3sZgnp3YI:s1iB0Bmki1fkZNj3sOuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389eacd25c14bbe93afdea77029e034b

Files

389eacd25c14bbe93afdea77029e034b
.dll regsvr32 windows:6 windows x64 arch:x64

fc3f0a2901bcb0eef0e9eff632051f10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateFileA
GetProcAddress
LoadLibraryA
GetSystemTime

Exports

Exports

DllRegisterServer
DllUnregisterServer
LeebpgbVdcrhwloqp
MbdvysRcnouhsojhzuAuafoi
PauseW
ResumeW
StartW
WettegypqfNmiyrviEssgzvmryndo

Sections

.text
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE