26668863fab4ec9ae1f23cf79cd567ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26668863fab4ec9ae1f23cf79cd567ed
Size

45KB
MD5

26668863fab4ec9ae1f23cf79cd567ed
SHA1

4d5bb57b6eeb0b19e6817f117815f10e2ae72d0f
SHA256

a77aeed28b912feef0baf764be60b3148d3ec1d787ce4d8873e296b559341b41
SHA512

7c58974749f07d3d3f1b965f91770f1dbfdbdc3c0f61adb8d3367cbb16d268f880b3754fc91d490e4c9690c63d1acb8cff94635bb44bce58c3f397de7a373ac2
SSDEEP

768:h881R5oxNRHZs+LehC6v7iHCjMA2XVrb7imnJnU4fU5x4qBCt:hzC5s+LehCuiHCj/2l5FfUflCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26668863fab4ec9ae1f23cf79cd567ed

Files

26668863fab4ec9ae1f23cf79cd567ed
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ