8bc78d40d91cb0c0b3cf27f94680c030 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc78d40d91cb0c0b3cf27f94680c030
Size

238KB
MD5

8bc78d40d91cb0c0b3cf27f94680c030
SHA1

e9a0a71d0ed44c08837cc06ab9e27ffca4051bf5
SHA256

0f210315cc450cba8814fb2a35da8f3d1829eb10dfde708d986b9361ef90af63
SHA512

ac55a13ee4aad6207f5537056d2e0971098a8dac97f5f6394ae211895469048981c9198dad3c2560c8cef32e56e0ad6b57052f53f7be5d5aabfbe9df387f533a
SSDEEP

6144:QOn5vMyOn5vMyOn5vMyOn5vMyOn5vMyOn5vMyOn5vM:Q000000

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc78d40d91cb0c0b3cf27f94680c030

Files

8bc78d40d91cb0c0b3cf27f94680c030
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
drtryu

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ