d6b185aec50c5eb71d3fd44c3cfe404f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6b185aec50c5eb71d3fd44c3cfe404f
Size

264KB
MD5

d6b185aec50c5eb71d3fd44c3cfe404f
SHA1

458b64b277479f93e26d1fb010856510af98d3c0
SHA256

0554a979641f72a031a7047549ab1809df0c1f6f54bf305a460b0ce85cad3782
SHA512

9154ad1a889c0d33bca564536b2ddded779843f9090c8cfd3f7d00585730fdcaa31a2825a7650a96173498b5f68c503bd66edbff787b01ec6574ae8dae86e8e3
SSDEEP

6144:R0ZWJC63nWjgsV/Uqgl6S8Gypw7xUNjPpYmQyIOhYlMC:R0oJXWfMWZfY41hq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6b185aec50c5eb71d3fd44c3cfe404f

Files

d6b185aec50c5eb71d3fd44c3cfe404f
.dll regsvr32 windows:6 windows x64 arch:x64

988a6896d5a1cd4276f4faff1541a2a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
VirtualAlloc
VirtualFree
GetSystemTime
LoadLibraryA
GetProcAddress

Exports

Exports

DllRegisterServer
DllUnregisterServer
StartW
StopW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ