94d376042d80ed8edaea87e30c44f5a11fa3219ec7a58bde21482050d581f203 | Triage

Sharing

General

Target

94d376042d80ed8edaea87e30c44f5a11fa3219ec7a58bde21482050d581f203
Size

410KB
MD5

c5e567578f49ee056c630c378fcb3b91
SHA1

e02cf569e3e5ca4d0182aaf11622bf07d09e19d4
SHA256

94d376042d80ed8edaea87e30c44f5a11fa3219ec7a58bde21482050d581f203
SHA512

cc9b0703bbf70a9dad65ef01426ee52371f5278e9a6ae39dd7905f71175dd02d93b2db17b39ad55c02cc1816b3b0c5d4377eb0950ebe39bfd2d2caa1334c039f
SSDEEP

6144:dXRw/7mYfSDHRoq1OGCXYZyVo+uOInJHW44dwO24Koi4Zzq7kM8nwNC:xR2gemOGCX/KJHWrqx4Koi4RqwJuC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d376042d80ed8edaea87e30c44f5a11fa3219ec7a58bde21482050d581f203

Files

94d376042d80ed8edaea87e30c44f5a11fa3219ec7a58bde21482050d581f203
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ