14c792a7998189d4198878bde934a2b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c792a7998189d4198878bde934a2b1
Size

80KB
MD5

14c792a7998189d4198878bde934a2b1
SHA1

7a565ccc88de19fa6bf79b38d052c22c362185ed
SHA256

3621ac2f41ee513bed9d0cb31545e46e7e454203404402d65841c4edff55bc49
SHA512

74ffa6ef60c96b23e788668262889fb1912eaa37c8a128471eb134cabc088d05938693a922d49f8eca727d46da39f96f226a7ff5e2b23839fe0b1324850b5cf4
SSDEEP

1536:s4t1S1ZADvq38DYf+XXbNlzj7iZaTLEzzVqY9Ixh4P03rn+:zDS1KDvqCKElzHiWEzxWc0bn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c792a7998189d4198878bde934a2b1

Files

14c792a7998189d4198878bde934a2b1
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn

Sections

g
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uviavlxy
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dyows
Size: 931B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE