87226f2e5ee91de4d9f403aba97eda5d | Triage

Resubmissions

01-02-2024 14:38

240201-rz8mtahfan 3

01-02-2024 14:36

240201-ryn7saffa2 3

Sharing

General

Target

87226f2e5ee91de4d9f403aba97eda5d
Size

28KB
MD5

87226f2e5ee91de4d9f403aba97eda5d
SHA1

6afa56dc42a2cb69865905e43bc3d55da092b893
SHA256

8d3ccf070562d7ad5e38c315d7edb74b828e2a847aadd3a9de9b0a53cca51c37
SHA512

e33bfced116f6aeb97994219483ec76571acdf3dca1b658eda5d562233b2330e9b4edded2efcf6f0da959739d02e9f656dbe40baf174326a9489388c83649683
SSDEEP

384:qAHxUSEqujwdKnGQmrjtlpKQfxWaOPJDbJI6f4O1s56TN4qmLOx29/gAzGAnA5eH:HKSEquMd0GQ835ODbJms2LO6NGxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87226f2e5ee91de4d9f403aba97eda5d

Files

87226f2e5ee91de4d9f403aba97eda5d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ