266818fb62a70de5cf32eb3fbe394b74 | Triage

Sharing

General

Target

266818fb62a70de5cf32eb3fbe394b74
Size

18KB
MD5

266818fb62a70de5cf32eb3fbe394b74
SHA1

1d49729bf9a42ce9814f62b0358049012be4a9a0
SHA256

64f11b6988d5171cff27b907b2486f6950c16677dca9f31363322b6ef3c9c03d
SHA512

b07837cb9b31156a3762b7d1863fc71a48eacadd14b63a6120c7e6cc38588a2a5e7e15c4f9e1fc9fbb6e78fe727654836cd9fb38b647546dc253b9a13b66cdef
SSDEEP

384:OO0Yt5KK/DiNFMBmRrlohn/yM4Ax58usy5LXzQ:7j5KCDoFMB8E/n4YyusyJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
266818fb62a70de5cf32eb3fbe394b74

Files

266818fb62a70de5cf32eb3fbe394b74
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 397B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 64B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ