ca7458fee56f8d1c344c48b6c69d810b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca7458fee56f8d1c344c48b6c69d810b
Size

220KB
MD5

ca7458fee56f8d1c344c48b6c69d810b
SHA1

ff4c727869cfd9f20b4e6ec759f7eba74e24c57e
SHA256

28a14a374899485dff65c5b9280568daed654bda355ec7eab552a9be7ae021db
SHA512

86e5393b651d941ba33cbc1728a8e4d8ff6e1af3188c4ff0a780bfc7ab06cbd042996a3d13ffc55565a00dd3c1afa55f60521537f5a80ea48aa9b03190df497a
SSDEEP

1536:FkfN/0KOAFXkfN/0KOAFXkfN/0KOAFXkfN/0KOAFXkfN/0KOAFXkfN/0KOAFXkfr:pKO83KO83KO83KO83KO83KO83KO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca7458fee56f8d1c344c48b6c69d810b

Files

ca7458fee56f8d1c344c48b6c69d810b
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
lkgdad

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ