72b54840fb4517f53c4bf34480138a03 | Triage

Resubmissions

24/01/2024, 18:18

240124-wxj9nafbc5 6

24/01/2024, 18:12

240124-wtdmpsfae7 6

Sharing

Copy URL Twitter E-mail

General

Target

72b54840fb4517f53c4bf34480138a03
Size

607KB
MD5

72b54840fb4517f53c4bf34480138a03
SHA1

8c5416669ff0bea78819c6020186e9b122747131
SHA256

d3e781cdde36c52cd590fe47a01c5583dda2d38417d775be19532bd2a479ff41
SHA512

21c80c00e267b0896839d36ca8e3b05fc1f78ff2aeb7813b5e0f42fdd7425fbd47203f8a93983721e59878cb0fb64f9ef88d2d91324e5d8fecfb037d8078f021
SSDEEP

12288:qpIt9HX65cspWkY5DARyLuaIg3QaoSrRmGQ005/:qetFXsoB7LGnaoSrco05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72b54840fb4517f53c4bf34480138a03

Files

72b54840fb4517f53c4bf34480138a03
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ