RegAsm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RegAsm.exe
Size

275KB
MD5

84bb4912cddc5526f29f2c8b0cf6e2ac
SHA1

e5c8fcfde76ea5361d5de46a9a7b6c766f13e294
SHA256

db8787f1b570226c838731aa982835fef13005ce3aab2a94bc46ee7e76b09b32
SHA512

3f52d0c543e7530b54f7679cf8dbc6b98974e9fe710bd12211efac972703418856efe3259a163b4ef5eff6ea6d97509c740b7edf22bc110ceed75d3589d116da
SSDEEP

6144:5o78SdyYD6tShRDTOFb9XsbVgIkMSNvEGl+xEOap:5/pKhqogIkMRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RegAsm.exe

Files

RegAsm.exe
.exe windows:6 windows x86 arch:x86

a2c0b34f57a6e3d5bac0e3e87ded036f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetStdHandle

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

user32

GetDC
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject
SelectPalette

Sections

.text
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ