5055c33219790f2fe40750981d40abae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5055c33219790f2fe40750981d40abae
Size

91KB
MD5

5055c33219790f2fe40750981d40abae
SHA1

8c0035f16263a5d643eb7a3c2484724e05ac6cda
SHA256

5d212865fa3530cf94c3f82a8efcfa2b42c5857a85e0ee456764cd55958e2faa
SHA512

4fac61109a8a76893d925eb2b7e0e5375c7d26b2d79e4fcf6d8cce4ac93980277f4affc1860e327bb7c7882e8997e8d431df7a8ae7b3509d5ce39b085a72d968
SSDEEP

1536:l/y4FgQkdsWNGrnjrFf5RhtlENOBUYh5hhE2o0mkbL1IfOkP4fd:VysgTCT3Zf3fl/Uau7kbLlfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5055c33219790f2fe40750981d40abae

Files

5055c33219790f2fe40750981d40abae
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

bd7iok9
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mwz4jr
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9j
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE