58f92240f99dc167fea6eef079ecb301 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58f92240f99dc167fea6eef079ecb301
Size

224KB
MD5

58f92240f99dc167fea6eef079ecb301
SHA1

8c51138864c7269211af6865b8e05116f2a28731
SHA256

a9912acc67daa70368ff54d39e5ada59f231833075c5ad39cd27c75c121b6a4b
SHA512

19efef8ac2623bb1bd090096abe839fe3a767af8402c9b1c3dea3f0c0e5bf6e0b93338c66c7ebbff73052384600ad69f0fa7a436234f5338d42e3a8f0a3bbbd1
SSDEEP

3072:Gf1BMnf1BMnf1BMnf1BMnf1BMnf1BMnf1BM:O1Bk1Bk1Bk1Bk1Bk1Bk1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58f92240f99dc167fea6eef079ecb301

Files

58f92240f99dc167fea6eef079ecb301
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg

Sections

CODE
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ