688436bf0e7c8a3a30a09be37466e2e4[.]dll[.]exe | Triage

Sharing

General

Target

688436bf0e7c8a3a30a09be37466e2e4.dll.exe
Size

158KB
MD5

688436bf0e7c8a3a30a09be37466e2e4
SHA1

5aee4eae3d4b8fbdcd33cda019df846863452bd1
SHA256

61837490031d47bbac205e6c0a51eb70e29f93f3b2b5ccd72ce4ac8ed5e31d73
SHA512

17bd280aa5333b5f6b9d3ed97ef66ffc33a068cd2f2e87372b516245ece09e3edf2b4b7ee7ce3c2617298bc4c3e45e65816cb75c58a5fd8fbafe7d1f9e978786
SSDEEP

3072:nRklnJo8EW38WmJj6jw9x5vrnW1nviRx5gdDM50:RGne8p5mJvx5jW1n2cE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
688436bf0e7c8a3a30a09be37466e2e4.dll.exe

Files

688436bf0e7c8a3a30a09be37466e2e4.dll.exe
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ