c1189be5356918bb96df9578537482f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1189be5356918bb96df9578537482f8
Size

202KB
MD5

c1189be5356918bb96df9578537482f8
SHA1

1bdba05f3d69130ee8db9ac47be21cda5e9ad1d4
SHA256

137014eb2133f8389c56ec7d64d3b5d0782d983fc054d8fe4b2c67734566fd1d
SHA512

2809df3c1ed26872d70e17de90132fbe7fc4be5006f52aa1022fdc133f614bbe8db69b64098308ac88260ee5501bae35c4db2c9e1af35dfecf50c8b582092778
SSDEEP

6144:DLFmkFPjl2t0uWa9Vyi+wR3RMaxeMh5J:nFmk20OV4w9Rzxem

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1189be5356918bb96df9578537482f8

Files

c1189be5356918bb96df9578537482f8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnRegisterServer

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ