dfa559e4d9d7c8fea104cfee7fe05bd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa559e4d9d7c8fea104cfee7fe05bd7
Size

120KB
MD5

dfa559e4d9d7c8fea104cfee7fe05bd7
SHA1

5ab87d38ce00117ea29176e2d6bfb1acf845d39d
SHA256

9fe519387f3d27a4b0098aafd3609f4add9778a392b223c81ef9e869e2ad24f7
SHA512

cadd6e7eab4b901393ba21a14cb0fd2c174317a36bcc6ac1ea1b558be30946e386cb3eb9b151d3744cc06015fb25c0ab989b442dea175124be36f79326c341f9
SSDEEP

1536:Z+qCQmOszcIoWkwKnlAlv4Jpo0WZvozv/rEpncOO4:m3OeoyH2gNsgcOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa559e4d9d7c8fea104cfee7fe05bd7

Files

dfa559e4d9d7c8fea104cfee7fe05bd7
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE