78f712e81be5bfee78010c8198d0b7bb | Triage

Sharing

General

Target

78f712e81be5bfee78010c8198d0b7bb
Size

104KB
MD5

78f712e81be5bfee78010c8198d0b7bb
SHA1

1684f426e7791e736f161f3911504513a68965b3
SHA256

9a1bf017c45c519f38283566a36ae7f664f33e2f67ce7b3c9798a2266c9a83fd
SHA512

54437413c875e0e897031ac4a2d5844d61a5f267d09d9015f269300874a9ff05e35eb06dc3c713e4951ba6fd9bdf05c3a8e0eda580338aee4ed623a1fa5867c3
SSDEEP

1536:PrkyT5M/Sph9ndCjhdbI6XVcqfQItWz66VUoHoUSQAvh7:jkg59qdbI6J4IUzz5Hjch7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f712e81be5bfee78010c8198d0b7bb

Files

78f712e81be5bfee78010c8198d0b7bb
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

FreeBP
InjectIntoExplorer
Install
JmpToExplorer
LoadBP
MegaJump

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ