661dd51ed6ad4573facaa43ae0726475 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

661dd51ed6ad4573facaa43ae0726475
Size

872KB
MD5

661dd51ed6ad4573facaa43ae0726475
SHA1

a2b9c4e01212f355a9cd5fc2fa326091718a3e6f
SHA256

9b3b8721befc4f323b7d9c64a596c9fec01159fa9d960119aac57816d73e471e
SHA512

70c933f3a16b713ce87aa65c341ab05a5bf16978a42b7af0c91688f80d7df6503f8a9fbce9d5ffb95504d0e1fe9ccd60ad8ce93047ee66c02690fd2ff4ce9988
SSDEEP

12288:4/5XusH7Qlkn+0zAmHmyXYYdbT+ehX6f3JDwTcoL3o5UhS:MX/H0lkntiu/hXo3aTp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661dd51ed6ad4573facaa43ae0726475

Files

661dd51ed6ad4573facaa43ae0726475
.dll regsvr32 windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAlloc
QueueMemory

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ