bd85fb002e9c4e05b3dceed34ebf7d64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd85fb002e9c4e05b3dceed34ebf7d64
Size

84KB
MD5

bd85fb002e9c4e05b3dceed34ebf7d64
SHA1

00ee4cc9cf46981c48f4bc14b8c85e4a39bac598
SHA256

4d64313599623bde9e99adf77ca82f75908508b6c2e966b2da0c0b66340f4dbc
SHA512

6b26378855048b3d2f7bec5510fc5ac87b8c1350081aecbd118238720b92a608dd99ca6260834a5fa54f8cdf82b8de983ab137123c34f898def0a61fb9bd3107
SSDEEP

768:LrWvibqJLwRJah2TQHLsCbWiLqskazVaAhTWqHbRIye8ooUWGkpwqhlPwZZJajz:fWvSaoJaVaoqsk2VaA5hIjWBhlPYez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd85fb002e9c4e05b3dceed34ebf7d64

Files

bd85fb002e9c4e05b3dceed34ebf7d64
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

Size: 3KB - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 60KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE