5131830882b8d1a52e5bbaf070c34312 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5131830882b8d1a52e5bbaf070c34312
Size

148KB
MD5

5131830882b8d1a52e5bbaf070c34312
SHA1

a0396e8337b1e268954dbc95c954bbfd822e95f5
SHA256

d42f5a3a91743891bb37e5c71f2277bbdda858befcfd5e33c5a4676cf404a70b
SHA512

20b36852406ca8ce83c1bd557707971e0b4b895400b68feabf0095e6f4b61e27e79ecde7745e737c9ba18e71eb69bf3fed3f81bcc76254d37abebad67c171103
SSDEEP

3072:aB3cQ7GNWI5tcml4nAQL5zcaZVv9BTN7RVbpWfffjVjz2mUy2QaX6p6T:aB3f+d5qpvRb6f7VuHy3aK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5131830882b8d1a52e5bbaf070c34312

Files

5131830882b8d1a52e5bbaf070c34312
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MainExc

Sections

CODE
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ