4fdbb09133e13200c8e65ce9e079f9db | Triage

Sharing

General

Target

4fdbb09133e13200c8e65ce9e079f9db
Size

32KB
MD5

4fdbb09133e13200c8e65ce9e079f9db
SHA1

12639706d137608a4af7b6ea382baa7b06dfbd8a
SHA256

cd7293f2ed47e2692583e74c6a959bb56eb229b9a527090a86f0cde1751ab0cd
SHA512

14a6456546826b7fc77b730df04bd936d43ffa135bc5d43d72f8cec23bc783d88f2481d38eeb87c2362f2e4aa13d87be04a1c99661f9f228db0e54dc3e34bc57
SSDEEP

384:hNNe06t9hcyL6oa2QFjOyDTto6iqFtiCf1ife0sV/r3J/rgpy8lWH/cIk:1eP9hdaFVViqFtzIEVzx4l2kr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fdbb09133e13200c8e65ce9e079f9db

Files

4fdbb09133e13200c8e65ce9e079f9db
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ