4de4c55aeb00a102ef1745be96e83402 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4de4c55aeb00a102ef1745be96e83402
Size

240KB
MD5

4de4c55aeb00a102ef1745be96e83402
SHA1

ae6eee79e05ce2d7402faed5ee508d2b57c45362
SHA256

61d77e0302c5fe22bdb3d889a8c1bc6753f02e1db23f13053590b22469d75466
SHA512

c5a0f53d1387d4cf83b1ea578ff3a0054bdf4cfd9b75f135ba486403166bf3160fafe1328f83c57abc48078fbf1302b6df1ea7fe2e1bafca8a838f8d9ffaed7f
SSDEEP

6144:7veSGzoveSGzoveSGzoveSGzoveSGzoveSGzoveSGz:7veSJveSJveSJveSJveSJveSJveS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de4c55aeb00a102ef1745be96e83402

Files

4de4c55aeb00a102ef1745be96e83402
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ