00380e60b7f1813e3e3c287cd7cf992b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00380e60b7f1813e3e3c287cd7cf992b
Size

19KB
MD5

00380e60b7f1813e3e3c287cd7cf992b
SHA1

c18faf4b6f526843042e3472dcf36cc857a1420c
SHA256

f72808b9a6f44e41728f1013c2b34543358843c579b856ff3b83134235a74315
SHA512

55dfc2e843174fb6f8d06512145090b6b9cffa81e19c541f341bcd950d380ba074176ba88042ef517bc0e12962a62b44ebed0f534a15a11dbf11d8d4312e47d1
SSDEEP

384:hWWTEcWePKORLzOIB5X5mF4KIth8b2Xv41rfbfLHloEtxbCUb4+d:2aKORLzOIBF5y4KOk2Xv41rfbuEb+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00380e60b7f1813e3e3c287cd7cf992b

Files

00380e60b7f1813e3e3c287cd7cf992b
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpOff
JumpOn
ThreadPro

Sections

.Upack
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE