9b194b547a5ba29bec2ef441d5f68c9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b194b547a5ba29bec2ef441d5f68c9b
Size

544KB
MD5

9b194b547a5ba29bec2ef441d5f68c9b
SHA1

c25d052064d8e2cc17651cd16a72d2b78af345b2
SHA256

e3783a33fd4f2de86ebe4f72cb8255e75f0defa1b5707d237a09abcb47ab7079
SHA512

054ce121afe2b50b2828147308ab6e8fda2f0bccbf670cdbc179bcf8a84fe3b9599104618fa43d31109fe96690cb7e7e0e304edbe0ed8c0519ab935092dd35d6
SSDEEP

6144:T3ChR78anFoKJyyE5z1d+XHsqzH2H/0qVYvlYbVWgFLbmh+MJt8ZL+tZG8SHZSAA:i78aFoeExecaqbVWsbmhRJtzMsAtNQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b194b547a5ba29bec2ef441d5f68c9b

Files

9b194b547a5ba29bec2ef441d5f68c9b
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ