3d6129e242d3ef1d28183cdbfa1d8415 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6129e242d3ef1d28183cdbfa1d8415
Size

20KB
MD5

3d6129e242d3ef1d28183cdbfa1d8415
SHA1

18aa4a96f32ccda82075ac07fb542a7e546e0dc7
SHA256

ecd087dd731572d4a1cedd487aca4e1a48f24edc166d8a059b6bc8e7486b1fd5
SHA512

69b92c5ad4b4c0f623ea05d61a1a30fd2a9678a4d3b082aff4a046d62b46cc2ec5cc4a2eb8f6e9586297ddee3079fc37025e7ef2f6bf533ed4f28af82b22e19a
SSDEEP

384:VzTWq98MwaM/SQ7WsZ+USL7COtcBPdIDEoanCsbW8sbWC:V3f6HaU7WJLiOMIDwnmX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6129e242d3ef1d28183cdbfa1d8415

Files

3d6129e242d3ef1d28183cdbfa1d8415
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ