08c91655c5a865f31f33decde6621e9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08c91655c5a865f31f33decde6621e9f
Size

11KB
MD5

08c91655c5a865f31f33decde6621e9f
SHA1

894f128c7aed64a4b784db9a27b52adac764e187
SHA256

586aa11b2c45409b8592cebe5385ca256a5374a605d418df9b6519871c07be40
SHA512

7427bbfc1eccdd68965bccf544952b5f6faf481e04987d465c0e4754011eccbdc4028139e477f6e2aeef487b2665807533f348e0d95596cbaa7003e06965f98b
SSDEEP

192:3z0zVW8mcWecziQnRSHbxmib1lkA7VKXI8teTMImJQU62ZdZVr1KWckgUwu4A1:AZW8mcWn8V1lR7B8sMJvZ9AWjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08c91655c5a865f31f33decde6621e9f

Files

08c91655c5a865f31f33decde6621e9f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

.Upack
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE