26a40879561539e97c1c9e890b84f964 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a40879561539e97c1c9e890b84f964
Size

47KB
MD5

26a40879561539e97c1c9e890b84f964
SHA1

6bde9c64481ba1131a0a77513a72411ab3f139dc
SHA256

4024c10f0ab33937d0c01c3b645dbecdfcd8400480485d0df963eb56006cbba4
SHA512

3369f1162e0e781cb3e775f1fd8f92181d13d9867927a417a15423d7d63fc7ae0ec6e12476f8a3f6d1622f8a253e6fda5c5109ac9a06c8daadb8eae82067ef82
SSDEEP

768:tSVMqQCVaQkUwjWnoYfspZ2JiO5OpBl2JLb+Abd2U6bOkBRwtoinxOHmQoRuzs:MVMqFVaQbfkpqiGOpBl2JJ4RorxfQoss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a40879561539e97c1c9e890b84f964

Files

26a40879561539e97c1c9e890b84f964
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOp
MgHookif

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ