a99fb7afd59b8294519d552724b1d9fc3c90b962da0a7b184cf57cf6d0975fc1 | Triage

Sharing

General

Target

a99fb7afd59b8294519d552724b1d9fc3c90b962da0a7b184cf57cf6d0975fc1
Size

164KB
MD5

0bc6f2cf16a01ac29f42d42ad0735ec8
SHA1

89e928836866c149903fd4d72f8e52d5bbeb11ca
SHA256

a99fb7afd59b8294519d552724b1d9fc3c90b962da0a7b184cf57cf6d0975fc1
SHA512

be7e226e804344c1465fe812f0d79f6d0924097ebd15a5b80795f405f66819465075151c6903695cec2f3cb489fcbff6bbe4c746e00645ba72b69417280b1118
SSDEEP

3072:var8ThVcXoNZbbwWr+8Ve+enyfDllr9N54rkbqvNQoRuLPA1BBL:qqTc+bwWFetyfRlrv5h9oY7CBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99fb7afd59b8294519d552724b1d9fc3c90b962da0a7b184cf57cf6d0975fc1

Files

a99fb7afd59b8294519d552724b1d9fc3c90b962da0a7b184cf57cf6d0975fc1
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ