64915871aa9c8ef93d23524df84d5d25 | Triage

Sharing

General

Target

64915871aa9c8ef93d23524df84d5d25
Size

31KB
MD5

64915871aa9c8ef93d23524df84d5d25
SHA1

1939fb13fe407f21eb0cfa22c7e6c0b73cc14ceb
SHA256

3f403eba529ef2977fb074fe21fa039930af407389afff7d7f09057964c8cb57
SHA512

68411a6ad34f1ec7747a9eb228295d0fc123680607e0c032604355dab825e0cd0bd8afadcde83179a56a6a0777053eb435d6d9744978450f1bb3627200c0729c
SSDEEP

768:YKSSquM30GQPCe8jE0ZP0wbLlVsltvhtixplrBA:oSquM30GQPCegtZBsltvh8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64915871aa9c8ef93d23524df84d5d25

Files

64915871aa9c8ef93d23524df84d5d25
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn

Sections

CODE
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 170B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ