6566cd48a129b95cfe0def752317304a | Triage

Sharing

General

Target

6566cd48a129b95cfe0def752317304a
Size

29KB
MD5

6566cd48a129b95cfe0def752317304a
SHA1

6ff08f2cfc5381eee23f5fb67d8a777e7d9a7fef
SHA256

6ad8702c88c4730ac61a7d90133f1656362c2427f24d2100dd1d2731685ddb0a
SHA512

1dc7ce4a27b1dc7ed3f1ca961a9add1156768d07f7098f5a9a8b022255ad6c469bd497d76e79f06fb6f9ffbc671db5ee94bda038542068ca48923be6e8c915bb
SSDEEP

384:mNNe06t9hc9PandEqU88GxBIrMHa2Nd0zsw930q8V3L8hgfcjXoQAau8WIHIBEuH:CeP9hhva2MswR0JgZzoQhWwIBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6566cd48a129b95cfe0def752317304a

Files

6566cd48a129b95cfe0def752317304a
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHjkFdSa

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ