2bc918337c5b416db5b6144bb14b4116 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc918337c5b416db5b6144bb14b4116
Size

154KB
MD5

2bc918337c5b416db5b6144bb14b4116
SHA1

9a6a473913900c2c96eb122b0fa8361aea32ad3e
SHA256

9062e0d52d6ffc061427054c82608dd7207f82b3d48e08be95600634be2e727a
SHA512

da90aa50e8ef9a954291193b4915962cc5509f48f4285f52152d0fe4b09ac5879422f0cfa4eb3523b5f323234e7f80201898bb0926fd3c6fb8e4c060aea65e10
SSDEEP

3072:RjEomM4U4mZI78aAVMlc8MF+dWcTG1hgdyMACrFny89y7:xviUo8a26FTghgXXrFnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc918337c5b416db5b6144bb14b4116

Files

2bc918337c5b416db5b6144bb14b4116
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

CODE
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ