24c98af592e8a7bafb2b3523149a6ac8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24c98af592e8a7bafb2b3523149a6ac8
Size

89KB
MD5

24c98af592e8a7bafb2b3523149a6ac8
SHA1

1feecfbcd8b2fe16f8b31c5eb7162bac84c0f620
SHA256

d89670d72bbe74956f89593f73058ef53c94ef2bfb7d4a631fa6485a81d81e3c
SHA512

f0a033f10524765dd4f05fbe65bbffa714d30e28edd47e5508593cbb6588a4b773b1283d54f572378befc5f7ee48c82e2eda10cc8a4c01fffb1f44ed1e49e9a2
SSDEEP

1536:RUAkxttx7SM9sT/OSJ33+y1hwRkdZFzTlfEKF/5bb16GZum6MSb:6AkPtx+tR1vw+/JyobvZl2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c98af592e8a7bafb2b3523149a6ac8

Files

24c98af592e8a7bafb2b3523149a6ac8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

albk2cf
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cn7ojpkc
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vka
Size: 4KB - Virtual size: 611B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE