aa5ca56c9f9d32c221a74070f858fffe | Triage

Sharing

General

Target

aa5ca56c9f9d32c221a74070f858fffe
Size

154KB
MD5

aa5ca56c9f9d32c221a74070f858fffe
SHA1

6004f83227ee8accf75a74739ee74ff076089d9b
SHA256

ae8d184388313417b85b486822b4e2326d0f44a00a294572d7433bed015d82b3
SHA512

b65b4aefed08a825dc080794b93ec34dee06c7230863bf2fdd48cebe4b4def08e273b4e7b120f9f9042f0cbdcf0b9eb9b528610126b0bd1faf761a8266877f45
SSDEEP

3072:RjEomM4U4mZI78aAVMlc8MF+dWcTG1hgdyMACrFnv89y7:xviUo8a26FTghgXXrFnU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5ca56c9f9d32c221a74070f858fffe

Files

aa5ca56c9f9d32c221a74070f858fffe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

CODE
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ