504455d26fb0dc0df2942a456cfd486d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

504455d26fb0dc0df2942a456cfd486d
Size

29KB
MD5

504455d26fb0dc0df2942a456cfd486d
SHA1

8c7b41d60b11504f209d5b50429e6ffbfb29f897
SHA256

8b01bfeb499732e09c53604419933bd2b7767aff1e302efc5cfc1ec7dcf627e6
SHA512

5ce930ba168e43206b66b9f7f31261f67952d5b89596cf55dbc311c69c84fd92901776c9b683ef528bbc0828257f1336158cec04a69ebd3dc15301c1580a48a0
SSDEEP

384:ONNe06t9hcPdkcN3Wtv71b4zwUZ3aJOmVgwu4Udw+saO+kxeJNTBk8WIH8/jo:KeP9hekx1/Wa7Vu4LMOOJT7WwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504455d26fb0dc0df2942a456cfd486d

Files

504455d26fb0dc0df2942a456cfd486d
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ