13300de9008e48b5b3d68e81a268588d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13300de9008e48b5b3d68e81a268588d
Size

79KB
MD5

13300de9008e48b5b3d68e81a268588d
SHA1

92e546d24142c49a4b8113ba426bfe0ae1c2fe17
SHA256

1ada2af21c0a7af31e398f2edf554372f924812e76689adbf37ed6a3a92cd327
SHA512

37e779762b99f0fa996967a78cb3a99ac6dc9e3a666f57d8bca6080a01f6da628d8b89afcc0b2d648eaf91cfd85c2ad0017c7aec602118964481f41a41733cf4
SSDEEP

1536:1qunAVimC1TEc8/bOqfEs0Y/P4bC4hTLWWc1k5S8urONgYQ70oEHc:YxCBW/bOqssxHyLWWcrDM47058

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13300de9008e48b5b3d68e81a268588d

Files

13300de9008e48b5b3d68e81a268588d
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE