30cb55d19e8024fa7cc211d54aca401f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30cb55d19e8024fa7cc211d54aca401f
Size

128KB
MD5

30cb55d19e8024fa7cc211d54aca401f
SHA1

46a8788e9c6588ad406f7c1c75d1f3f821281cff
SHA256

94e192e075e36560e53817fcea06cf2ef1e7ec8ef41ff4c0f1f143f9b1f89563
SHA512

4def3d1d9382480c1306fab2fad518c6ddc640b6d5f8d3c6cbc2f366f33db1acbcb4bf8f4e73c66eee4616ea498cb67af137f02c0d38ad32d33823dd70c9ce38
SSDEEP

1536:BWq6QDefKPuTkES3pWcjlL8N06KlFtxnkG:SmWKPYShp36Kdxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30cb55d19e8024fa7cc211d54aca401f

Files

30cb55d19e8024fa7cc211d54aca401f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE