17c886bca39362dca2eb518948743b40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c886bca39362dca2eb518948743b40
Size

11KB
MD5

17c886bca39362dca2eb518948743b40
SHA1

a8da6ef58fbcb3fe248f68a6809ed239eab3a81b
SHA256

2a28a58314f8b005712628b23637f4fbeff6dc58102ce7910779b10c67ade217
SHA512

6cb55719236be718d3c9e94f5af169adb8ca1299e72e8467b9ee5ce1528d3f19caf043ede7cc67ec1273e79af5c83b139939b582a07e411d7d44f319359ed2c8
SSDEEP

192:xwzVW8mcWecziQnRSHbxjYfUjttCPDZS3uHm+PsjjkgUwu2A1:iZW8mcWn8VYfYNeG1QJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c886bca39362dca2eb518948743b40

Files

17c886bca39362dca2eb518948743b40
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

.Upack
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE