44d5e7cd54386ff004b3773676d2b9fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44d5e7cd54386ff004b3773676d2b9fc
Size

39KB
MD5

44d5e7cd54386ff004b3773676d2b9fc
SHA1

cbd2aaf1b913ab6485c63ed1b2a9221a3f340173
SHA256

a241d26a00040ed258b6a2aa2483632fabd70608aa2c187d26fa93b2c017fa5f
SHA512

397a1ba63af508de2bc52b8d97dc611441fbaa23e83a52158e234363658e782613c4d56117a46d4fbe1e7ebc0f028bfad8dae7048de7dc287a93b5ad4c2aa3e5
SSDEEP

768:2ycquQ04tFzFsGvKdg1srdvun/0UW/ADvtU3oLvX6dKNt:hcquQr7zlmFrI/0/OvtU2wQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d5e7cd54386ff004b3773676d2b9fc

Files

44d5e7cd54386ff004b3773676d2b9fc
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ