50f88e3fbf6e263f93ce5f1a042ead26 | Triage

Sharing

General

Target

50f88e3fbf6e263f93ce5f1a042ead26
Size

43KB
MD5

50f88e3fbf6e263f93ce5f1a042ead26
SHA1

adf64ab5e6830e2f7e28680ce4120b9e4703797a
SHA256

1c784c1734d86a38d44860b96511ec43f4db14bbd4db812131502b4094b464d7
SHA512

ca4792396559392dcadca48c398cb7dee0161050e180d475a78a4460d7224c08aab20964d3aee03c4ab65927a647ff2f7c27a8c00751de98e2c48ad696757154
SSDEEP

768:Z88F+8S1Rh3eBh3mcu/v6Yysq/mD3cDCAPkVkFlW6dv4KydEsQb3JB:ZjS3U3mcu/AsJwJPkVok6dwFuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50f88e3fbf6e263f93ce5f1a042ead26

Files

50f88e3fbf6e263f93ce5f1a042ead26
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ