461a96ca2eb34199106c68addbb9317e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

461a96ca2eb34199106c68addbb9317e
Size

122KB
MD5

461a96ca2eb34199106c68addbb9317e
SHA1

134a124520ca1d9e136805f6b290162942305880
SHA256

5d7e792e0052d73ca0a5ef52f88e994138f7e3df52dd0274e346a90a23c193cb
SHA512

75206cf310d2eabc67431b359cf9307c406f293c5c066aef6c2e12a30a6b9277329c7304279518fbac6eba80e689751080610db05eb827e7a9da053e58a0514a
SSDEEP

1536:WkfuSmpAZVLv3kfuSmpAZVLv3kfuSmpAZVLv3kfuSmpAZVLv:MzAtzAtzAtzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461a96ca2eb34199106c68addbb9317e

Files

461a96ca2eb34199106c68addbb9317e
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ