6389012c0957010eb821f606d687388d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6389012c0957010eb821f606d687388d
Size

252KB
MD5

6389012c0957010eb821f606d687388d
SHA1

6181939c3c05c594d20db572c0b14fcc8729cdc4
SHA256

babeb499140c96726e419b0087930f4a5a433c18c33ed61a76063269564c1860
SHA512

3408cc7424037e474d8f7f5b6634fdef99a0eee6eb6d1b94628b54fcf472b21ee99755cb4f14140ffb45f0bb929101ade7900a3dac1bc123dbda348974e5460f
SSDEEP

3072:eJeA7UJeA7UJeA7UJeA7UJeA7UJeA7UJeA7:eJeAQJeAQJeAQJeAQJeAQJeAQJeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6389012c0957010eb821f606d687388d

Files

6389012c0957010eb821f606d687388d
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ