8948ee4aba3dd4fd72b7e3739b7cca34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8948ee4aba3dd4fd72b7e3739b7cca34
Size

120KB
MD5

8948ee4aba3dd4fd72b7e3739b7cca34
SHA1

f74d24948dcfc730bce5dc466a81c9f64219eb2e
SHA256

26a6e9427ad8938a9ce79665ca647fc10d96a00acb43c25dfbf2d50b0a440e94
SHA512

24c4b52b4ffbc8dcf9130ed68075c689ccccc22e5f0e06ba03b92b6a628d85a949359b2e2c63647a544662f717f378adee07fc5a30a9f86aedd24d22af83bfff
SSDEEP

1536:cu7PH1x3CeX6ffjh57KcZ4DIIyMQ1KJNj+RyTa8Fwzam8dl9h93NUyE7:cu7PHz3NwocZ4FIKXKyTa8Z5h9NUyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8948ee4aba3dd4fd72b7e3739b7cca34

Files

8948ee4aba3dd4fd72b7e3739b7cca34
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ