1c9d120d56e83cc66777ba841fe45f36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c9d120d56e83cc66777ba841fe45f36
Size

34KB
MD5

1c9d120d56e83cc66777ba841fe45f36
SHA1

a0fd2d1616a289899163bf332794247e9c1efb6f
SHA256

14e077e9b893a67bad59c37289c7dcd8600ebf343e2ea822dcb4491d1080f4b3
SHA512

ecfa01d4d089f52e57753dbec8815e0c6e2da5f0d623b54f3ce46224f813695988e31c91a52c33ab0b7477d18067060701631c00b2a372cffd7c5f8bced58786
SSDEEP

768:jQoi6qZO1Qegd2haWNBZUT8BGsJdsGJJ3q/o:jQv6qZ4Q39WXZUUGmfqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c9d120d56e83cc66777ba841fe45f36

Files

1c9d120d56e83cc66777ba841fe45f36
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOf
JmpHookOn

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ