514f4b66ea36e752a23465c8ca520113 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

514f4b66ea36e752a23465c8ca520113
Size

140KB
MD5

514f4b66ea36e752a23465c8ca520113
SHA1

f16e42176185f2ee9470713226c1c260a61a5f09
SHA256

9b2933802ab5fb8118a3f53dc1b639909bbc6b16a5da0c39e03e526d4b1fd65b
SHA512

efdf74b033fb83afedf85be94583c17b33f29b64a31e9651598179f856f3fcdecf4c98e17a41917d8b156b5afdf82069f28790773c6d747fe28d90323f0470ed
SSDEEP

1536:pQcN3pp8DOPeYNY5nNvnL+maAEAZJUf9fLiV+/mP4R1t5QjqtYAlqa:mcN3T8De3NY5ImgA01fWVsmQVuqOg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
514f4b66ea36e752a23465c8ca520113

Files

514f4b66ea36e752a23465c8ca520113
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

h
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

77
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uddh
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE