4e11c42fe2ce514ede52842fe89fefe8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e11c42fe2ce514ede52842fe89fefe8
Size

587KB
MD5

4e11c42fe2ce514ede52842fe89fefe8
SHA1

63fb2429393a9d4e556ff39159586808a898eb5b
SHA256

3cb94914efc444352a012cf1070c67882eac8e2e3a1e99cf86f55ee4ec3e7ec0
SHA512

8e4e1e13933bcfbc17056508c69e589b8fa1f74941574d6accf4815b3a8186dcad1e82330b2fa377cfd51fa08551c69a489885ecaf2c9b1e6554e824603c3fcb
SSDEEP

6144:qxfeils5TTxJJqAhWO9c8TSPER1m/1fkYv0PI1AKYpur7Z5iR3VXIA0Ss8S7BBCs:e2ils5TsAExhCyopu3ZiPs8iCy/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e11c42fe2ce514ede52842fe89fefe8

Files

4e11c42fe2ce514ede52842fe89fefe8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ