57380c8c5232afe48442fa57a2b770c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57380c8c5232afe48442fa57a2b770c6
Size

47KB
MD5

57380c8c5232afe48442fa57a2b770c6
SHA1

e7de529577047da3ff7ec1925f56c3c76bd8e8a9
SHA256

9774a791d6db8c581d5e49dfa7384933bc47d03c675466f3a76c5064ea226078
SHA512

00342239cc86bb0136036e6de8fca3594743eaf00754051c6b7a3181e94bbd06c6fae644c6844618d82c41e009f112ff146966a5f875aa318bfa72e75747001d
SSDEEP

768:wSVMqQCVaQkUwjWno/rQF1iO5OpBlCuQzjGVeIvNG2H6C92dxOHlQQ:nVMqFVaQbIU1iGOpBlC2dvJoL8QQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57380c8c5232afe48442fa57a2b770c6

Files

57380c8c5232afe48442fa57a2b770c6
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOp
MgHookif

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ