3e88a1858f15f91d658298c7c2d14d92a4c39e10fd2fb152d7ee149c1c4ddd17 | Triage

Sharing

General

Target

3e88a1858f15f91d658298c7c2d14d92a4c39e10fd2fb152d7ee149c1c4ddd17
Size

5KB
MD5

47212cd83d29f8545854a621603b4d32
SHA1

21d459d93850465d842a26a23c7f5ffd1a9bf680
SHA256

3e88a1858f15f91d658298c7c2d14d92a4c39e10fd2fb152d7ee149c1c4ddd17
SHA512

4e15b9152ee27b4580d83377e3a7fafabdd8735160bd814ec664c27757d0d345fc0c0b9975e71b9f3472540358715b75f1283282d7e942c5d52b6c8ae4d300d2
SSDEEP

48:CuHc6a2f/h8h7w/oy9a4nANdgF/4tQIZW0H1lXnFFbh/o5Ww1b:5LanykMAN6/4iEWs/nN/sWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e88a1858f15f91d658298c7c2d14d92a4c39e10fd2fb152d7ee149c1c4ddd17

Files

3e88a1858f15f91d658298c7c2d14d92a4c39e10fd2fb152d7ee149c1c4ddd17
.dll regsvr32 windows:10 windows x86 arch:x86

470c89a203ef20dceb724f326b131e03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

smalldll.pdb

Imports

kernel32

DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ