a31a58e28df941e3356309423884d8a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a31a58e28df941e3356309423884d8a8
Size

641KB
MD5

a31a58e28df941e3356309423884d8a8
SHA1

18991ba67bd23482ba92c57a9f952d3a839f93ea
SHA256

bbe4ceebf952a59a1394a43c21a1a2df4fcb1d583a59a409eb9336245c3f66bb
SHA512

7492e187521f27012f90e9391eab46e16faed0a7d9f85058ca1b2e254afa375170c4a54f551a5d5ac32c912c669fc05a851c2d01ebbe318e7262b345de47fafa
SSDEEP

12288:w0Et9YDc5DMWfT44XUDxoyiD02sHtaUoChcu2tePm:YtWDc/EXouPtfzh7A+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a31a58e28df941e3356309423884d8a8

Files

a31a58e28df941e3356309423884d8a8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ