5ab12ee0f5514a315e9553c6543e60f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab12ee0f5514a315e9553c6543e60f5
Size

462KB
MD5

5ab12ee0f5514a315e9553c6543e60f5
SHA1

ef23e4577d3d1636a318c33ebb86b7b286e8bd03
SHA256

0a285d0ac82a39e88fdc6bab4abb1e4e8f26a94cdf04936e6842337014fbe4d5
SHA512

041c8851c455788aae6c6a6d8e53bf1914534ee40fa38151333a3086743266cad847edbe3f7ad2773add7830d62ec7b8a3c1f84602132504c9987eeb2e813f8c
SSDEEP

6144:7bVPXLakbTqht5o+nKivd8Z4sPYwp4KltOzlZRMCKy6fcWWHDecHAI3C+8hkBz:db4DmavdW4svpLtmRlKMHDuIycz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab12ee0f5514a315e9553c6543e60f5

Files

5ab12ee0f5514a315e9553c6543e60f5
.dll regsvr32 windows:6 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

DllRegisterServer

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ