bca5891973c7efa30f8f7723944dbba5 | Triage

Sharing

General

Target

bca5891973c7efa30f8f7723944dbba5
Size

26KB
MD5

bca5891973c7efa30f8f7723944dbba5
SHA1

f2b4e5734e4029b2ccf244ecadcf66682af1d96a
SHA256

3a38d650113fdf4e24b9a7f840ed0468c6a670e3dc93e009a796913a0fe73a55
SHA512

be4e46b066e2aa29c9d77fa1ebb8a4d3325ec9883fc05548e1ae6713bbe13414833436b7b7ddf0f4f5ffb367aaa0a84aa4828de1c7457e327fd786142fdc3366
SSDEEP

384:lAHxUSjYqujkZKnGQixF9HK7s0THweFEUtrdi1itB1pKjs5dAzugr5vsb3LV:+KS8quYZ0GQ0OscTmU9V5augrRsb3J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca5891973c7efa30f8f7723944dbba5

Files

bca5891973c7efa30f8f7723944dbba5
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ