cd85714babe50493ab5cd88b74dba8ae | Triage

Sharing

General

Target

cd85714babe50493ab5cd88b74dba8ae
Size

30KB
MD5

cd85714babe50493ab5cd88b74dba8ae
SHA1

5d5d5b98c7ca5c392b2e30501eb63c92bfa6e31d
SHA256

63f64a7e2bae9b661b5e2b8c25b2870fbb8558bcf500590c4942424943f0eb0d
SHA512

7dd62db793ed33a9a7c054ab7bf3f7f81efdafb26444321ed893f6297192450d1ecfe2dc69301ee6621773e45c99826b4a3298db282e280789bf8c920253bd8e
SSDEEP

384:wNNe06t9hc6/0YZa+TavPIsepis5KkXEQXtcy6cI/Vka9f/Bgg3IGLJ4a8WIHbqy:IeP9h6AiGQs5KkXEstcy6PVkaLFatWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd85714babe50493ab5cd88b74dba8ae

Files

cd85714babe50493ab5cd88b74dba8ae
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ