4611340fdade4e36f074f75294194b64dcf2ec0db00f3d958956b4b0d6586431 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4611340fdade4e36f074f75294194b64dcf2ec0db00f3d958956b4b0d6586431
Size

697KB
MD5

8d0d2f755880bb88915e790ee18ee132
SHA1

a758d41ebf8a3a702f031355320cf5cf2df79203
SHA256

4611340fdade4e36f074f75294194b64dcf2ec0db00f3d958956b4b0d6586431
SHA512

a1c345e779db2311434b51f5f46fb7d546dd6ac27a9a038218c5fa4c4beea1ec4d8c8e3e05990de4c18af30143bd08a3a269557a8d7caa0e1d27b4f258a8e11a
SSDEEP

12288:PEgK8y5QS3Qcyx9ouphc6jXQ0xy3Oa4OshKjkn364k2+OWbzeeW:PHK8iQSQbx9ouphKw953b+xzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4611340fdade4e36f074f75294194b64dcf2ec0db00f3d958956b4b0d6586431

Files

4611340fdade4e36f074f75294194b64dcf2ec0db00f3d958956b4b0d6586431
.dll regsvr32 windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE