4ae300078c09e676b0d80c6d425372cc | Triage

Sharing

General

Target

4ae300078c09e676b0d80c6d425372cc
Size

273KB
MD5

4ae300078c09e676b0d80c6d425372cc
SHA1

88002122a01c17b1aeadce4f16d2b6af357e7a7b
SHA256

d2ef717cfcd130dd1b93fb5ff6bd192df33fafe4f49b80a6b6712c59c76c99bf
SHA512

4918bcfa4ba84fcdb0f1dddb81d943d5501f4a8d8dfe347b36228dd77175b12c6ff943396c3fd10b4325ba2ac90632ddc80f4be0cac8b8aed9ee095bcf58a29c
SSDEEP

6144:6JVwb9E+azpJVwb9E+azpJVwb9E+azpJVwb9E+azpJVwb9E+azpJVwb9E+azpJVn:6JVwRE+aVJVwRE+aVJVwRE+aVJVwRE+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ae300078c09e676b0d80c6d425372cc

Files

4ae300078c09e676b0d80c6d425372cc
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdds

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ