c1aff1d92d7b1adefdaeb65ab441d20f[.]bin | Triage

Sharing

General

Target

c1aff1d92d7b1adefdaeb65ab441d20f.bin
Size

47KB
MD5

c1aff1d92d7b1adefdaeb65ab441d20f
SHA1

3fd086ba2965bdeb78200c7e7ed4546be95aaf1a
SHA256

8ecf985112f9952a61850c5159b83142434e624e724b0052ea7aef0f2c89ea9c
SHA512

6e4a0697b97d06b4b409b3d3fd66224e152a0b3832c99e75ec52861e7976ff18a84066d34cde0e85621f82ac8baad6d5008ae0c45b32ce5d09697c7c723aaf39
SSDEEP

768:YyDO6xu9+YlJ3WUa2O2dNm0S0UOUZ07tDiOeujIvZ74Or3Z9XvnIg4XE1dcqU8:o6xuHllWUaHIM0LVIIDzeuI4Or3Z9vn9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1aff1d92d7b1adefdaeb65ab441d20f.bin

Files

c1aff1d92d7b1adefdaeb65ab441d20f.bin
.dll regsvr32 windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 37KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE