5c403af7cffb56018093150908f6019d | Triage

Sharing

General

Target

5c403af7cffb56018093150908f6019d
Size

592KB
MD5

5c403af7cffb56018093150908f6019d
SHA1

9196a4e8a69130a48540ca2591c1974d0041b31e
SHA256

12443121dafa96a3dde7159000857bd6bc01a3a77bdce0a46b3399ce3b90309d
SHA512

bd5a77a324a414268a2cc87d525253717d21cae69c16672d368ce3ff5bbf66c425c1db29388a989e8254eba032e19261a936340a07418e4b7364ecc8caf59c06
SSDEEP

12288:gOmcAWWUHNiaSB9l+Yw701jipzVPzL4pcxhTaReM3/:gO3kUM9l+YwYIpzVP4CvTmj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c403af7cffb56018093150908f6019d

Files

5c403af7cffb56018093150908f6019d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time

Sections

CODE
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ