1149aafc6f02b630312d110ee434e4fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1149aafc6f02b630312d110ee434e4fe
Size

33KB
MD5

1149aafc6f02b630312d110ee434e4fe
SHA1

0b9edbe1fe268ebc161d6890dcfa9da829a01faf
SHA256

2c8f991b85fe1699a7301a9313efd17deb72d7ba3acccd7bd39e816d548706b7
SHA512

15ad15d7883af4586e30734674562b8ddd46b70808e08172849ca26b33cd46031c4722dea5b970a8a514b029f9155f3126951ff96a69287755d3f0133b5d6b0b
SSDEEP

768:ZePqx1szKSxIlMpzRA0/MyjoYbBvRon79:cPqx1s0fLydqn79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1149aafc6f02b630312d110ee434e4fe

Files

1149aafc6f02b630312d110ee434e4fe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ