b048d433f46b721ae0ab99c87d581029 | Triage

Sharing

General

Target

b048d433f46b721ae0ab99c87d581029
Size

164KB
MD5

b048d433f46b721ae0ab99c87d581029
SHA1

5f12ba40a2d7d16327a898702ad4fedda6046928
SHA256

80b8c62fd0b325eb13aa18328b17ae34a610b196571cf8f3173f85a148dcec69
SHA512

81a6f19aa6e3b17d2aea66922ca3025334097ef6265a7ac4c082d8a22bdadeb7a42ce9f07c16bc66634a01dadd8de088dfd6ec48fbdda911c03131892dad88e2
SSDEEP

3072:cTltpXTmRUD82PbjCb5lcUpLhUf05x97bsqWpaM0fB8U6xcBwVSuU1E7YbqnOuOB:CuC7jj05CUpLhUsj97hM28xmwUuUKkbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

b048d433f46b721ae0ab99c87d581029

Files

b048d433f46b721ae0ab99c87d581029
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer
DllUnregisterServer
PauseW
ResumeServer
ResumeW
StartServer
StartW
StopServer
StopW
SuspendServer

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ