51f30024b29577760446aeababb52b3b | Triage

Sharing

General

Target

51f30024b29577760446aeababb52b3b
Size

138KB
MD5

51f30024b29577760446aeababb52b3b
SHA1

518564ba6ce68cca43963f5ec56d0a6194ead1c6
SHA256

e45055b07b7bd92626b2e420ab4633e096714dc3da455423f11bc31148fd016e
SHA512

faa35003073d85a2b8d8e77ce75eafc49f23e80f017d72b9bb3f35ec6628fb429af4c2f344cd553a5d5cc649fa3facd2cf1a4841c8d8f5ff8f30823cc2154c0c
SSDEEP

3072:nniCKttdWakp6GzofLHP8QyiKUv5EjT5TDu4UxfdwQxPIOw:iCKttdakGwxxKUB4MdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51f30024b29577760446aeababb52b3b

Files

51f30024b29577760446aeababb52b3b
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ