48f6d79eaa18034ee869e1e9d7198841 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48f6d79eaa18034ee869e1e9d7198841
Size

61KB
MD5

48f6d79eaa18034ee869e1e9d7198841
SHA1

e41b05a3c7d19819e1cf13622c3472492ff3986a
SHA256

f37e0f966d070bc97a0abe7c736989fd92fd152d174ae6c42d9dba2c72e618f7
SHA512

347d86bd8de49e9f80e0d655fad27454964deb4b58a4b48bc17eef600dbe4c06e6dab6b0acc0dc5007d076c6a271c134922eb435197694988e3059bc0e03c000
SSDEEP

1536:JIyZ7I1WDw0VR4eDEn/jUVjePGDGeGpMmy/ffdv4DZesTdFJU:JIw7I1mh4eDyjUNe0GeG/Uffd3sT/JU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f6d79eaa18034ee869e1e9d7198841

Files

48f6d79eaa18034ee869e1e9d7198841
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn

Sections

nsp0
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nsp1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE