c9ff5d0b58ee0cf77ce7913cfed58405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9ff5d0b58ee0cf77ce7913cfed58405
Size

30KB
MD5

c9ff5d0b58ee0cf77ce7913cfed58405
SHA1

f8c6775eca92ea37158210ca4e3bfd1d6715b993
SHA256

816028b809a527b608b0f21ac2f4b66c6c4692df02087e11d5ed2551da70c59d
SHA512

38ce5fd017fe3f402ad328175e723121ae96d71d1fb140a03a36812c452756c7c45972f0cf93323d3a489b1db40abc79dc488815538a15b545cef449d7adf5e4
SSDEEP

384:y59+PbhI7kZp9WB32GX3kp3XkY79GDpT2dhmL4Q8d60BsV7ZK8sIHEbSGa:a+ThI7GW3cUY7MD12f2p0BsdswE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9ff5d0b58ee0cf77ce7913cfed58405

Files

c9ff5d0b58ee0cf77ce7913cfed58405
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ