479c782f79eef02eab2c4db4a7758fb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

479c782f79eef02eab2c4db4a7758fb1
Size

88KB
MD5

479c782f79eef02eab2c4db4a7758fb1
SHA1

a4f999e5040fd3f6d8206edf24ca4c69b3e23c68
SHA256

e4ec7a17c1eab4f00529567133560dee0b2531fd0af0554f61d8614d22cff5bc
SHA512

c741ac1a8d9b63323dba50d152d445d0cfb6df8b7dcb879aee2fc462ba70e5f8c1750b6f772ea263c22d1150f0249341a0297d595c4ace5126c0083cd844c8bf
SSDEEP

1536:y9P+ljv9ifgu7YY/aJ8lct9jAdU/GXnk/HXKaIyhhTl9sbmWFA+oU/q++2u+ERYt:/lxiJ9qrXjmXnk6aImh593+XTRERMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
479c782f79eef02eab2c4db4a7758fb1

Files

479c782f79eef02eab2c4db4a7758fb1
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

d2bfq7
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tc
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2g7
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE