5339a86b324270df244fdcde377ea9b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5339a86b324270df244fdcde377ea9b5
Size

26KB
MD5

5339a86b324270df244fdcde377ea9b5
SHA1

4919a7bc955ab63506c67e40c9a213dc4879da0a
SHA256

d2ee3fd60e526c8f9bd9dcd0886414760baeb38e6b5a1e25378adbdad68007c7
SHA512

2dc9a1c6d17f24acd4a08b52441ec7b8b70a3b16828f633e9362b4c8b458188e3317eb686694002fd6e07820e78701939c06b20a9716aeaa834d0919ee7d16c0
SSDEEP

768:w48ExhoKSdL5MfKFdUnuJePV3fVrmcrAfO/l2GIe3QMSSjC:dNzoKS37kNNScrAf7GIe3Qp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5339a86b324270df244fdcde377ea9b5

Files

5339a86b324270df244fdcde377ea9b5
.dll regsvr32 windows:4 windows x64 arch:x64

9c0432e1910a7f6b5d39ec1826872d5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetProcessHeap
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
Sleep

Exports

Exports

Control
DllRegisterServer
FreeBuffer
Release
Start
StopW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 457B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ