19b613e00cf1c5769bfbbddd8f2d9042 | Triage

Sharing

General

Target

19b613e00cf1c5769bfbbddd8f2d9042
Size

99KB
MD5

19b613e00cf1c5769bfbbddd8f2d9042
SHA1

dfce2353ad2c5c1a4209a0fb0a7c333fc6870e78
SHA256

998fd73884c32db22bdc1acfbe60e8aea11c5a903d7d59e497b429ea605c83fd
SHA512

63bc2947dfe01eebb069b586f7a28e4569b0f4a8a66ebc3325a6ee6ac53a55262508aa52fb96f53fdb037d7e8c12f6d98001e9c8a60755ec00bc5025eabcab9a
SSDEEP

3072:BAuyXWZc2WN+GrZ3l9lDhrqSv4Xca/eA/u5vFfioQ5f/9:BTyYlGr39U6uu5vFfi5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19b613e00cf1c5769bfbbddd8f2d9042

Files

19b613e00cf1c5769bfbbddd8f2d9042
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ