0c3750db5f338010fa005e88540f20600d52b52bef7580abb4b99bc18f7df1e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3750db5f338010fa005e88540f20600d52b52bef7580abb4b99bc18f7df1e3
Size

228KB
MD5

d4892c31e6376dd9e7005aaf40195cf9
SHA1

2c9248740b97e4fba812bf3dedabbdb4b6a6bb28
SHA256

0c3750db5f338010fa005e88540f20600d52b52bef7580abb4b99bc18f7df1e3
SHA512

7d56fface2dac21d92befb80eaf1769926198780ff709655917e63e39c100b9288be8f9b6c6948e0e5ce69a6556c1cdaaa8fb2a7dbf291df1d0fe51c54cd2185
SSDEEP

3072:7525R5AqvHQBU9kMazGfWx+z4FfqTqj6dsU3vs22FrOteYL5Hym:752T6+g+z41qJxUTsteY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3750db5f338010fa005e88540f20600d52b52bef7580abb4b99bc18f7df1e3

Files

0c3750db5f338010fa005e88540f20600d52b52bef7580abb4b99bc18f7df1e3
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetdfDIJoystick

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ