b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a | Triage

Sharing

General

Target

b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a
Size

95KB
MD5

03ae7d0aaf88b66661a4ea4a560aae4c
SHA1

b3038f180ad2b831ed2d7190d8ff6a8402f5afd9
SHA256

b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a
SHA512

ffa9f3e03dd2040e5b1a67286ad9a16a7d6287c977f3540c9896a99bec7628b620fe4c7b0b8277b75371de394441ab454b79cc3742ddfea52d15ea4510b3bcf6
SSDEEP

1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivfSN:x530ysqinXU39E/3lRA6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a

Files

b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

?ytre@@YAHXZ
DllRegisterServer

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 547B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ