5329911f706434b57d58429469897164 | Triage

Sharing

General

Target

5329911f706434b57d58429469897164
Size

635KB
MD5

5329911f706434b57d58429469897164
SHA1

b42c30b3d0a48d0244aae03688ead71faeb881cf
SHA256

0bcf0f70229ccc0343e2a891e7c4626e25877309260260b64a6167bf1846a49a
SHA512

27fad142868c8dcc2b1924464c45b810030a28f6274cebdd1856c281bb4f88f22cd036e73ff67d97e5c0d09d5cfcee7cb0230f2db51656fbddb9cfcb3b6f39e4
SSDEEP

12288:YM0t9FNcxDMmfrLAF8rZIRf2MmsXatHbLBwL9Ohw/fO79s:ItjNcXnVInvaN/Bw8hI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5329911f706434b57d58429469897164

Files

5329911f706434b57d58429469897164
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ