47899710cb6af4a79c946a2557f4fd89 | Triage

Sharing

General

Target

47899710cb6af4a79c946a2557f4fd89
Size

384KB
MD5

47899710cb6af4a79c946a2557f4fd89
SHA1

77cd14fb0de4e89dff504a5cb08a689f6a1ecb59
SHA256

86ff1ddd16f934e134f9ebc0a2926474f850fe761d21e6861fa739f8cda64429
SHA512

86dcf17fa91ae36e53963617108c95e696a5074991f3dd9bb0d016aa190e0443d6a6a3503cce7c4b7038a0044b567fffd16c8dfd86c29c802d0f7d287ee5d64f
SSDEEP

6144:xTkpGspcEimzcfHoSSiOfN0oMKcQTBJ/0H1qjjf1VW7AIzCF:et8mwHoSMf6oM/QTrBI7hCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47899710cb6af4a79c946a2557f4fd89

Files

47899710cb6af4a79c946a2557f4fd89
.dll regsvr32 windows:4 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ