552bc08de9d4753b438af895f06a5f2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

552bc08de9d4753b438af895f06a5f2a
Size

608KB
MD5

552bc08de9d4753b438af895f06a5f2a
SHA1

7d4c1f9494886332ae4e6f0cacf9356ba6effb9f
SHA256

ac7b31a5d2cffd275955f50ad38da044eb1f3263dfe28f3f198dba434492bb98
SHA512

48140f85aa85a387a6abbe59bff0a8bbb02d0f275f90f0bc265b517fa5bcb5696d82b5a09a7c6dbeef785be0fcdbd5d3d9962a51d9da8b79b5b290b3bd247c76
SSDEEP

12288:mpIt9HX65cspWkY5DARyLuaIg3Qaobrdnsu2StV0n/:metFXsoB7LGnaobrj2StV0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
552bc08de9d4753b438af895f06a5f2a

Files

552bc08de9d4753b438af895f06a5f2a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ