252d2670d9f15ba79277f0e4c2b6c26a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252d2670d9f15ba79277f0e4c2b6c26a
Size

140KB
MD5

252d2670d9f15ba79277f0e4c2b6c26a
SHA1

96f4cee552f086a9a2dcdd1141ac2664fde5aeb0
SHA256

dfebedc78a4d0e396537452ae656526dcc0cc45e753a8f98bc816a9a715d0bd8
SHA512

a372df183252f61de8ae6609d64333136b8f25cab5d884662d5f091c04026ee9a3788d2a75cf87c74e98eb2f0a7955190ae63eb1d91f3913d5d97ea155918399
SSDEEP

1536:pmx4ZXwgKZCJH9Gdq1h8IRPF0h8k79Pl5E0HW6JxqRvr2HZVuwt:8QwJCJHMq7RPFidkjvAZAa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252d2670d9f15ba79277f0e4c2b6c26a

Files

252d2670d9f15ba79277f0e4c2b6c26a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

9kn7yxu7
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2em
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vcac4
Size: 56B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE