aa399aba9919d3e92121706226980e22[.]bin | Triage

Sharing

General

Target

aa399aba9919d3e92121706226980e22.bin
Size

640KB
MD5

aa399aba9919d3e92121706226980e22
SHA1

50e941112bd3df76a8d4db843d6c52566514d3b5
SHA256

2c6dc0f6d6791375cd7aac69795063ea56256281999ae507f26d32b23b0283b6
SHA512

c7249c1542cd1b37b92df676d0819af914f3f9ca2de18a72c1decda2f53d771c2fdf326c0b3a7f88cc2b9035760f4c9a932f2e2815a8466196a33ab2d1ff9d84
SSDEEP

12288:N0Et9YDc5DMWfT44XUDxoyiD02sHtaVunXhcU2tePm:ztWDc/EXouPt8uXhxA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa399aba9919d3e92121706226980e22.bin

Files

aa399aba9919d3e92121706226980e22.bin
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ