2b29bbf0e78cec55cae71253aa5f3810 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b29bbf0e78cec55cae71253aa5f3810
Size

33KB
MD5

2b29bbf0e78cec55cae71253aa5f3810
SHA1

cba42673b860fd8f724da1f6474737a83f9d651c
SHA256

de41050829aa5cec1d460d8b4ec7ce64826f5c3d69c331bccd07a2c40452f4be
SHA512

b5cfddf03bb57e35d2728017fb0f5538bc4f2d425d189ebe41fc7e7c6e251ff2718fe0ba4ea9a121bd07fbf2136a954e03ef09aec1f470194529aad566b28809
SSDEEP

768:xUC3sqdS1QeTpf0d1HsFlHtuhksuJP8stxSz+xA:xj8qY1Q0F0elH2kz98+hA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b29bbf0e78cec55cae71253aa5f3810

Files

2b29bbf0e78cec55cae71253aa5f3810
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ