00059f482a364af7bf67d2ee5e03680e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00059f482a364af7bf67d2ee5e03680e
Size

20KB
MD5

00059f482a364af7bf67d2ee5e03680e
SHA1

ec5c95be117a84fb6c4e5526a2b2531db8b10752
SHA256

baf4c216901a16477460d805c047d38a8dc166534760630407204e305aa5e9d3
SHA512

854a6c0976fc657b4bf44a0b872730b905029a03e66a097725cfbbbb543782f4e8d0b5b18b319ac4cd7783c8e01f23888ad427bfa8241442d6359f133cae9e31
SSDEEP

384:WWWTEcWkDVjFWTZ+I8F+76l0xayS03QQ48ZMTy/1hfOkau+Dv/49EP0C:d6JGZde+7rxayS03d48SwhfvK/4u5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00059f482a364af7bf67d2ee5e03680e

Files

00059f482a364af7bf67d2ee5e03680e
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE