0cb868eb1cc1b9872b64085fc86aae79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb868eb1cc1b9872b64085fc86aae79
Size

33KB
MD5

0cb868eb1cc1b9872b64085fc86aae79
SHA1

5b031896bfcef6a1dcc3b34fb7cf40daaf058948
SHA256

8f7d85c38334961c7d6ab536ba9e1dc935b91081ffc31674e82780b1d35e7c21
SHA512

bc0eb2dd4a240e3ec9caed25fe6000bc55ab6813fd0d4380377d9d8ac5eae9c311f6c9d2c0fb27acff6af4885d5e37ea350505d6aef90ba7ff345e12fbb75f2c
SSDEEP

768:9+v9h44Yx+lDPBvfoQKbvyNclxxzOWwlwVE:9E/zYx+FBvfx6EiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb868eb1cc1b9872b64085fc86aae79

Files

0cb868eb1cc1b9872b64085fc86aae79
.dll regsvr32 windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
gfdhtr

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ