40228f5e0bcf3cbb62f5c5e83afd3d41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40228f5e0bcf3cbb62f5c5e83afd3d41
Size

125KB
MD5

40228f5e0bcf3cbb62f5c5e83afd3d41
SHA1

44f5df6dfc0e19e0b8e731156bfe7a0b079764de
SHA256

d4f5b8759983a213e951d82cb2ac0f6aaad23b4b8341b7d1fdcab48a20f25dfc
SHA512

17696eb29031931aa18f2eaccb17a231dc63172024bae1262efb3ad7f713b8dde7331ca7e4cff43981e40c047dfdb17af39ac04073964282c03b27bafd3552d8
SSDEEP

3072:VMGZuKSbijTm8nt4gKyf4Tz5VHU9T8UcLVI8ZVOuR8foEYaUwu9:Wso6VcCZ8UcLzV4QEYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40228f5e0bcf3cbb62f5c5e83afd3d41

Files

40228f5e0bcf3cbb62f5c5e83afd3d41
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ