292366e59839c682da1ee74560940963 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292366e59839c682da1ee74560940963
Size

136KB
MD5

292366e59839c682da1ee74560940963
SHA1

44272c6f7bef25eb1bc93cba92f1e373d2a1856d
SHA256

dd78cd15013d2e6386d12493f2f743a464044d20ff024c1353839e207e56ae46
SHA512

778d1effba5b39458e45b9dd5d465ea47f908afa1dc9375efe8839549212b04c7d5637b4868a6689a7b648fac79fd217814abde87534b9fb6fa4d641f3cc39c7
SSDEEP

3072:8FKHIUERBuHnLd8gjlZhcANEeLdSalt7bXdp9cYWawQP5tcTm0pEOP1Vy4:+kIUvLxjnTEeLd1lt7bXdf0sR0pPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292366e59839c682da1ee74560940963

Files

292366e59839c682da1ee74560940963
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

CODE
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ