090aff9588bb6ee96803388456d53365 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090aff9588bb6ee96803388456d53365
Size

43KB
MD5

090aff9588bb6ee96803388456d53365
SHA1

3651131a7686e64d184e8f90ec5cd84560898e60
SHA256

bc622c2a423ddb94d67be62b609c61515852739ce5f1e2dd39ac72c5fdcf39e6
SHA512

4f62cf10e45eaa22e1e2de13989a394823d9549f51cacfed1dcf3c693a1e2a26535b08bd7c48d7c5d184d28e67ed7ab25dd92e2d490e424df320955d11380cb5
SSDEEP

768:sCSqWQJgeCiOYLJrP6bd8iO5OpBl7PnjisNxkjlUv6YZ7Yx4hSSjSP:bSqWQKXYLJrP6R8iGOpBl77vx8lUiYZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090aff9588bb6ee96803388456d53365

Files

090aff9588bb6ee96803388456d53365
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ