0a208860c8bb7d2fc3488fb8e82b01fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a208860c8bb7d2fc3488fb8e82b01fe
Size

33KB
MD5

0a208860c8bb7d2fc3488fb8e82b01fe
SHA1

b1036e78b16b85ef7e1e862678c594d8f0923135
SHA256

0432f79fe0467ef7d4ab094b9438d7adf5ba04828661814b2257cffc3703c2a7
SHA512

add1d9142ea123790ed507bcb845554b5ffb8f4fb07f0e1b1959cf3d4f3b81dd4e3a67759ad47ad3caf0277df90d0dacc6d73851f6cc324cce1548a7f22c05a9
SSDEEP

768:NoiCqZOJQ6S4E+G2fiHCjMAkOeJ1zjCX9xBTr9:NvCqZIQ6nfiHCj/kOefzcr9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a208860c8bb7d2fc3488fb8e82b01fe

Files

0a208860c8bb7d2fc3488fb8e82b01fe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ