3de94cef2aff1754097f372330c067c5 | Triage

Sharing

General

Target

3de94cef2aff1754097f372330c067c5
Size

30KB
MD5

3de94cef2aff1754097f372330c067c5
SHA1

7d178ce88019518616607588187c65138a888f23
SHA256

6571869a8f478ae1e711475c298aaf8e9f89d7700859b72068d1a3faff6d5063
SHA512

7ef62eddd48d9ee0bc204abf8a2b2c859c12aae401149a804e6a17a1c73097bfd8424abb3a7c19b0898e0b7dd74a6d686d905d9712c10324845e9846a25e3d65
SSDEEP

384:BByuzek/ySFy8JXbV5IEj0M/mR0HIPuncBbsVlWokLeb4VJ34C4AzdDP7kFyqf:NM8JXbV5N0/R0HI1ZsHW1yYjdDP0yk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de94cef2aff1754097f372330c067c5

Files

3de94cef2aff1754097f372330c067c5
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOk
MgHookOn

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ