99166dd15f74eeb84eb0f5204305282e | Triage

Sharing

General

Target

99166dd15f74eeb84eb0f5204305282e
Size

651KB
MD5

99166dd15f74eeb84eb0f5204305282e
SHA1

648a7baf08c99d417c383ac69f15286f705c6d48
SHA256

e502a4f40bd0f83bd19ad20da8b102ad420bb2727a6a1012a0c45845210d74fb
SHA512

a8294c63624255f0389069f8b2ab4fa50d700c399873ac0c74968cafdef9986b2ba60305ff26143a576df13ea5c96610eb92cc85bd136c54498ddb91e30818e7
SSDEEP

12288:Y3olNWdbK/8DteHxx9Stv3HuZEzCucWpn9V3PjVguH9sDLzHeIBv7pj:YsNguWMRfieWWG5fjVvHQreIBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99166dd15f74eeb84eb0f5204305282e

Files

99166dd15f74eeb84eb0f5204305282e
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ