52fee98ac2045e751b3f0bc40f061017 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52fee98ac2045e751b3f0bc40f061017
Size

47KB
MD5

52fee98ac2045e751b3f0bc40f061017
SHA1

6b4b5f6ce516984beb4c200c9ac4a188118b8055
SHA256

f41a8d3ff543915501cd8ae46de184b56ae746cadcdce282a35b66dcff1e4f58
SHA512

f00d7ec88f958b0fd3122b687634b1552b833e0c9055997961f3ece967660fbfc4431ae4b4af75e9add8457d7551452e51f5dbf819fe7faa1d3a7563b94691c5
SSDEEP

768:RSVMqQCVaQkUwjWno5qYZB3flpyULWiO5OpBlsXKSRHh+aCP3EQQ3wgxOHpQ5//w:oVMqFVaQb7YZBPXyULWiGOpBlsRoEZ3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52fee98ac2045e751b3f0bc40f061017

Files

52fee98ac2045e751b3f0bc40f061017
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCls
MgHookOpn

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ