cdb0a612e5f2d807a8961e343ac445ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdb0a612e5f2d807a8961e343ac445ad
Size

71KB
MD5

cdb0a612e5f2d807a8961e343ac445ad
SHA1

fca84a5c4b3825f0554e01f0eed026ea784a0cc2
SHA256

b0f644b006a9b029c669753c2dceb4e33485a7d44c54828274e37f2190636247
SHA512

ed3354e8b25dcdf3a660aa78096530a158f79e9c6be1f9dcab241ab943f19ff282da5164d84f1b479d915be8bfdd0a2a475785bb3ab5447e7eaf94147d6d0141
SSDEEP

1536:K84EIjsQsA/sWIzvsTsY7C+E1PM5JoN1:KgeEvwW+E1PAJoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdb0a612e5f2d807a8961e343ac445ad

Files

cdb0a612e5f2d807a8961e343ac445ad
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ