002792e608b05308a36144ab8b16502d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002792e608b05308a36144ab8b16502d
Size

19KB
MD5

002792e608b05308a36144ab8b16502d
SHA1

fee28ae7e2c6422949c50b34e07fb5c601c618d8
SHA256

224a1d71182498acbb1e25678c9db6de66789c33ffbf2bb56f327ab1c573132f
SHA512

70d729f82cb0e9b59fc33187e8ef08c85e793eed5484688b40de512d40fd24a98a4aa5433ec119f14ef0a30541b56254c4e0daa1f4730dabedfbabb95dcddd6f
SSDEEP

384:lWWTEcW12J+FXv+eMseniYtBPmj91/BWQChmFkAD5Wb+DFsMo1f4RUqGJ3:q/2J+mtBtBPwVBWQqmFPOTf4Rly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002792e608b05308a36144ab8b16502d

Files

002792e608b05308a36144ab8b16502d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE