06cfc46f88ff047bd85858b6fadb6058 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06cfc46f88ff047bd85858b6fadb6058
Size

28KB
MD5

06cfc46f88ff047bd85858b6fadb6058
SHA1

f50484bde749251da05e1de74a63db1ee8b56a18
SHA256

f7127887d71fb7bebc256c6a025ed8406c8744dee47cac4e2858452962001cf4
SHA512

c9117a8fadd273e89f1719b2c03e95b38aa60534f6d6fddc9f2f5d7640892db59f9153c7a167eae8e9c91b96210a80f61148d2b9f483a02fe37f530e369518d6
SSDEEP

384:Ij7dxz0CgDoqd+1A2Qzet/vh9feyix59ikZ3kTer/muFy4UR+HZxlAG50zH7QLr:IjgCgkqdSvQCf9fcL93r/7Fy4GVHGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06cfc46f88ff047bd85858b6fadb6058

Files

06cfc46f88ff047bd85858b6fadb6058
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ