013765741b8dd44462d8ec56a4e4f2aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

013765741b8dd44462d8ec56a4e4f2aa
Size

37KB
MD5

013765741b8dd44462d8ec56a4e4f2aa
SHA1

c3154dd77e8e362356be5b47b8fbb6bd3b6dd197
SHA256

52ad6d2eca8b5b32fa0451ec33ada05a02fc655a7620f6824ebfe1b03b14c432
SHA512

0659b2037f14a1c21362015588da65d5fb79caa632675e58761ad36fbc73cdc3d0e5372c4276293d67f4bd0981bbce99115c1fd9c360ec3f3c2892c081de7e5b
SSDEEP

768:UFyAqCQBd6I3tEn6zg5i7dlVSNC869iPesg27id64xhlPLD:1AqCQDX3U6zMiVSNzjesgokvP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
013765741b8dd44462d8ec56a4e4f2aa

Files

013765741b8dd44462d8ec56a4e4f2aa
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ