39ec3e5957f3f0df0ba6e2aec2821a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ec3e5957f3f0df0ba6e2aec2821a8a
Size

167KB
MD5

39ec3e5957f3f0df0ba6e2aec2821a8a
SHA1

f65cd4788276594978b10f390db8f2473f7a99c1
SHA256

6b91fc7d19bb45e93f4df70b3bf283154663b9dabebba07b055601553021f9a1
SHA512

890d2b3b68bcdcf23e718cc57385a01ee74ac399d9e56d37d08d8219b87294f50ed427b007250a90dbfc6a09fdb3dec9b5c69a994ac92b51f3419eda37e8e5fa
SSDEEP

1536:nlhdY96muil781TZoaQ7G6xh1S8wENfnn0fhnPrZ4KNpnGB7GI0FAtSL:lhdY96i41TZodVJnyVTmKgaXGtk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ec3e5957f3f0df0ba6e2aec2821a8a

Files

39ec3e5957f3f0df0ba6e2aec2821a8a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE