987460a06683ea111a7ea34f7147d827 | Triage

Sharing

General

Target

987460a06683ea111a7ea34f7147d827
Size

242KB
MD5

987460a06683ea111a7ea34f7147d827
SHA1

101fd95a1bf7e1a8ca8dd8b532c7cdca13f99ae6
SHA256

1a7ac36779e8df2854cd900ef836e9ba34ec63f7831ab3dc8862f75007841682
SHA512

2b3be76fea8c8a59359d58018566e1bf0cb771885bda232fff0966d9c8ccc6a3c2e3e1654bcd732c6177c057e03b8353c06eeefa021fd32b1b84a8d179c7383a
SSDEEP

3072:1yDxQe6tQD0u3EzAgdzF8iAYdDYR1GwrH+uZWHXkKvxl4msi9kDxw48K2XE:1uxQeEUp3wCAu1dDZeDsvxT8KiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

987460a06683ea111a7ea34f7147d827

Files

987460a06683ea111a7ea34f7147d827
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer
DllUnregisterServer
ResumeServer
StartServer
StartW
StopServer
SuspendServer

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ