99fcc70217472e5db8f9c05ce9369ba8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99fcc70217472e5db8f9c05ce9369ba8
Size

596KB
MD5

99fcc70217472e5db8f9c05ce9369ba8
SHA1

30dc15e793c75334e95d473728bd5ab0afe2791f
SHA256

e1d9389b928feb111ec712e0b704f594c1e7f2347688b34ee7060b093d89133e
SHA512

15649c372eff9d438ee78171519cdd72e7c5fc1f3a1f63e26c3bb924e894797949fcd14a6a32fbd6c593a48a6faa23bed0dfcf29eb0715d66ecfaefdfe53ee3e
SSDEEP

12288:csukklWIbKdQRJbQlbqWya5cs3NQqGKv1NlBk6l4:cvkSWh+OlPya59QqGiNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99fcc70217472e5db8f9c05ce9369ba8

Files

99fcc70217472e5db8f9c05ce9369ba8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 509KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ