5af8aa8b2bb28c7d5e5165ac388b1937 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5af8aa8b2bb28c7d5e5165ac388b1937
Size

193KB
MD5

5af8aa8b2bb28c7d5e5165ac388b1937
SHA1

d96a37e62a2d90c157705413f6f00238b3fecf27
SHA256

17ad8fd7f7e2a1614ecffb3d3c9ea065dc0215ca92ef5a6ed84ccf2a714e7af6
SHA512

5528b7d03458cfa16eef1b075f97f12de561200f6c7be4ed1c2a890081dda7af7408c20c29ce7d3befd6e95dc495fd72f92c67714bdf7464b7b40c1132e3aa40
SSDEEP

3072:4OH1colBDUFZFoZUq0ohOsyd2rp15zuMe/g2GdZ6mwSdEnfWZN3cbyQLawZ7ewHO:7GvFoZwo8d2r75zujbGdZ6mhkaoewHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af8aa8b2bb28c7d5e5165ac388b1937

Files

5af8aa8b2bb28c7d5e5165ac388b1937
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstantAccess
OpenAccess
ecnhe
eswhe
euhwe
iedisco

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ