b7edf6fa09dc3a111d24c2a25ccd5ba7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7edf6fa09dc3a111d24c2a25ccd5ba7
Size

56KB
MD5

b7edf6fa09dc3a111d24c2a25ccd5ba7
SHA1

856cfe8b15c89e12bd259dc9c7f94311caf2cf36
SHA256

0eec3d4cdaf3ed454bb3f994ea2dbae8158570a71ceaa5a0f7f50608bab2ffc5
SHA512

025bfacbdd844d3ce8c8f059360226ca95c7a951cf654c164b0ec79dcf56ebdc0a3138b206a76197b47c616c643264aa9c0dad278692debe37d494de2486ed4a
SSDEEP

768:VU4L88nP00By6Fm09/V2R3/GMfmUlxkZiUBlRJyS6Pn8YInKU:O4Lps0BHFm0WSy9f8ZnKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7edf6fa09dc3a111d24c2a25ccd5ba7

Files

b7edf6fa09dc3a111d24c2a25ccd5ba7
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ