ded99bb4ef3ae4338bc8233630fe8ee2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded99bb4ef3ae4338bc8233630fe8ee2
Size

251KB
MD5

ded99bb4ef3ae4338bc8233630fe8ee2
SHA1

98183b0733218bd8bf756dbe5f21f2b00eb57f4f
SHA256

91cb7b97f1ebd48d2bfaf61d1a9261aae66415aecf17db61ef3ba976dc384e5d
SHA512

c0ba3e196d47ff3e9df9ae9c3b057c2e7abedd2ec10c200d40693b82d7bc180ead230c9a6f212654e1897e3ca7796032f0c3ba33e0134fa8c3c1b83760a5dba9
SSDEEP

6144:hk0nmQ25Bc//////wVgaus6yB1jJ22zyNy4HhdKe+irQ8Qk:WGmTBc//////l9s6m3zgHhsWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded99bb4ef3ae4338bc8233630fe8ee2

Files

ded99bb4ef3ae4338bc8233630fe8ee2
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllRegisterServer
init

Sections

CODE
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ