1c7cb478225552a557a9dec496db76af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c7cb478225552a557a9dec496db76af
Size

20KB
MD5

1c7cb478225552a557a9dec496db76af
SHA1

2f35cd12afa6f363c47b457f44f391efbf4c9709
SHA256

2fab3174085d679de5da8320798bef168123f2a700b408a353087abaca4c3d14
SHA512

f981263993715ce0752fdb5ced706713faf6ef97ce2afdcfd61024908381d77fc4de6439f107f97cffcdfd4b1094697b8cac803ee0d04074cacbd3c0bf641a58
SSDEEP

384:2zWWTEcWweeQGaK+pdWvDRwWY73ZTFdRVYyKuLu4iSbwyo102umJIKV0h:28lja+pdQRwFTXYyc41wzW2umJIKVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7cb478225552a557a9dec496db76af

Files

1c7cb478225552a557a9dec496db76af
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE