51af8887c0d5e5756680d36487708f56 | Triage

Sharing

General

Target

51af8887c0d5e5756680d36487708f56
Size

636KB
MD5

51af8887c0d5e5756680d36487708f56
SHA1

0ea43e6ed485fa52780d91dc626dab9e02c8b93d
SHA256

baf2b7d70e1f1a6464be7b5387d8fb9536334daf30c5794bb1345d7cacddb9bb
SHA512

2953a6ba7ff61cfb3aa9945fa0e84ca9c4d898cab6f741d2fc7786fb79c6f2cff5f1fca908125a68c41d7a8a53de370a377e3efc31c6bfc93601199b35b281b0
SSDEEP

12288:1M0t9FNcxDMmfrLAF8rZIRf2MmsX4egudxEhhL/fO79s:jtjNcXnVInv4e3dxQhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51af8887c0d5e5756680d36487708f56

Files

51af8887c0d5e5756680d36487708f56
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 486KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ