80006bddfdd758e0230e89fc838865f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80006bddfdd758e0230e89fc838865f2
Size

266KB
MD5

80006bddfdd758e0230e89fc838865f2
SHA1

c810e41e5a2a6cff8f8b6b830ed2239e79a20ae7
SHA256

59e5990b99eecfc9a4670b07e94cc9740e6ded6738ad46aea51b66dcd2c7bd33
SHA512

d8467a41b20067083cf7b1803c4d376cea2f95a765d6d51628ca7694cd11cb050f3862f397694b8559b4b30843ef7680f54f43582c448f43e993d520c7081e12
SSDEEP

6144:wH2URFxH2URFxH2URFxH2URFxH2URFxH2URFxH2URF:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80006bddfdd758e0230e89fc838865f2

Files

80006bddfdd758e0230e89fc838865f2
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ