7b4bdcd65e26e2ceff3ad7664b85f6e4 | Triage

Sharing

General

Target

7b4bdcd65e26e2ceff3ad7664b85f6e4
Size

976KB
MD5

7b4bdcd65e26e2ceff3ad7664b85f6e4
SHA1

979462e3292e8301dead47b79e63d5b0ac350eea
SHA256

af66a6498f63c0a3cf47054a2dbc6451f6e887cb8d030ae5972233ce52a7248c
SHA512

f53196ceb7eafe8f69c1695ae02134ebc28d9e0400031dd6e12ba204a394636a5794c4d6cab8888e9cdac8e7fcb47003d4b574aafbde0f863680e2d7bca1f45c
SSDEEP

12288:APDNLCmaZplpO2eQnApsAV+FL0YPNc1O63P59wraR2Xr0ryrb6/8LMKiW1acbUq8:KxEXpOPpHva0O6B1AYO6EhQwUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b4bdcd65e26e2ceff3ad7664b85f6e4

Files

7b4bdcd65e26e2ceff3ad7664b85f6e4
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 910KB - Virtual size: 909KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ