5aac44a336bd0a4b75ee398b5fe761c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aac44a336bd0a4b75ee398b5fe761c0
Size

143KB
MD5

5aac44a336bd0a4b75ee398b5fe761c0
SHA1

7557311e54ddd9f6fc60dd742359736c5786baf2
SHA256

c3e0e3adc4e97443c979115d16cbc324053584a959b0bbe8d195ffa96e919b34
SHA512

426737c20abfbdf92a9136209d5fe9d679cd1c4211797bfaab741b09adc543d4634342f0339bb093fb1f0f30cc9476c6b7b564d312515a1ca51aa6aac3f2e40a
SSDEEP

1536:Bat7u9PqrH7cByd24bC4hTLWWc1k5S8urONgYQ70oE:ou9CnuydGyLWWcrDM4705

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aac44a336bd0a4b75ee398b5fe761c0

Files

5aac44a336bd0a4b75ee398b5fe761c0
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE