55ec9a4c548784dde989d02a7951764e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55ec9a4c548784dde989d02a7951764e
Size

127KB
MD5

55ec9a4c548784dde989d02a7951764e
SHA1

d3c2d862ac48660503b629ce3181fd73d36f893f
SHA256

2d066469b1143d189b52397200c04587396d4343a088a63baed4afb76c2eb96e
SHA512

cc340ce2744ffa3c2f7838c1fd88b8d05134edcbb87ea651d23afaef4f06b68f86a49979df9ab2409356756d19ce38eae93502f455c8da3f30e2720921a2e268
SSDEEP

3072:pMpULZUQBkWpGrzk2SZ96Gyo4e6LTZZNgULM/HfyO:SGlUU/7ZfqXWnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55ec9a4c548784dde989d02a7951764e

Files

55ec9a4c548784dde989d02a7951764e
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ