3bdcb892e617522ff77eff79414b864f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bdcb892e617522ff77eff79414b864f
Size

43KB
MD5

3bdcb892e617522ff77eff79414b864f
SHA1

e81b588c89c7f346d328d5a86f434a5e5df5b79e
SHA256

9bfe2f96b8b4328f3baece99db0cce531ec87500080b1ef0a854c24d5630e09c
SHA512

7504b3e7d127980e9c4c8047bbf7b4c4460f08461da4c16cfb17eff6906fd51985f9cd8255c9cfcf1587c856e86a4152919e9688cbc580a4b3a89a78adfee037
SSDEEP

768:kCSqWQ1geCiG8LisG+4WiO5OpBl7Xn2RL3EpP3dFG5u618MLZPdx4omsC4:TSqWQGP8LisGZWiGOpBl7QLWVFYNyMLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bdcb892e617522ff77eff79414b864f

Files

3bdcb892e617522ff77eff79414b864f
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOp
MsgHookif

Sections

CODE
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ