0fb098ac51a99e8398263ad2148e74eeb12f091682d550ddc6b99aa5b6c3f966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb098ac51a99e8398263ad2148e74eeb12f091682d550ddc6b99aa5b6c3f966
Size

116KB
MD5

03ba3ddad7eaf648e07b0e5600721f68
SHA1

5896387242440d836063e01077aec2cc5ff3d364
SHA256

0fb098ac51a99e8398263ad2148e74eeb12f091682d550ddc6b99aa5b6c3f966
SHA512

3fbd4de88c6da8ba583a2278ca3cade40fa9dc2be71587dfd8228debff77b2dd834d990fc758ab03322cf800194e0450c03e464b576f29fb4dda8bb68087c0ec
SSDEEP

768:Sb/hBQoi5qZO3QOSxodaCbR2Ala562sIJLwYk6R+Tbii/zyMZ/OPdGVs1CWd:U/jQv5qZWQ4NnYPhM6i/zfZWVGVs17

Score

N/A

Malware Config

Signatures

Files

0fb098ac51a99e8398263ad2148e74eeb12f091682d550ddc6b99aa5b6c3f966
.dll regsvr32 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE