1f408f76b8bd864230bdd12316a250ca | Triage

Sharing

General

Target

1f408f76b8bd864230bdd12316a250ca
Size

69KB
MD5

1f408f76b8bd864230bdd12316a250ca
SHA1

db6690b84ba8d3956500ada5927613be45583509
SHA256

bf57208de540b615d4d4994cf563465a339526028e90b77beefe7a74cb6680da
SHA512

a2a6904ec845241cacf4b6056ac37c5c51cde86c10d57d857243d0116597e9f84c19962a2cc99006ccb9c8b71130a1293a66d3d7e7033be340b05eb465214fa1
SSDEEP

1536:HaWuPNJU3aiHCj/PtfNAXEm7V1m29evV5KonJpDvM:PuPboatAEm229aHKeJp7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f408f76b8bd864230bdd12316a250ca

Files

1f408f76b8bd864230bdd12316a250ca
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn

Sections

CODE
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ