498b653348b0080993705a9edc26f7c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

498b653348b0080993705a9edc26f7c5
Size

165KB
MD5

498b653348b0080993705a9edc26f7c5
SHA1

b3a45168bf5dc6eace9cb2a6b70f244f67e3d40b
SHA256

36fd6c1f2fe8b08e74b4b8079750c43f7a6d23754df324958e86efab1277ea0f
SHA512

8426c3eb53591203dbe64654899e1742d2ddff2a2d4b62fe3a596bc4c45369a4bcaf425ff4c5ec244c330e2e288fa3049142b5eba28d672a35d9fca194661842
SSDEEP

3072:ZyZqI2TNDlMtygeRMr7c6iG5K4DP684qtVrvxKDToHQZ2JTWcnqtf3w3Ro5uK9PZ:8ZqI6mU56KcykF5QZ2+5z3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
498b653348b0080993705a9edc26f7c5

Files

498b653348b0080993705a9edc26f7c5
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ