667b4129bc0098187aa49e21c011b7f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

667b4129bc0098187aa49e21c011b7f3
Size

167KB
MD5

667b4129bc0098187aa49e21c011b7f3
SHA1

f5bb7425fb4fb0bf2fbc1042fb80e127b0fcd618
SHA256

d75f2bbf46eb5c11890afe9d86b97f38b2a6e9153972651d8ceda2a21bc44ca4
SHA512

35e771425dade84fa001cc6c87370278545e993112de16b0178c8cb6620c669e0de2e9e5f02bea12feea5027c157f7c62b6aadbebf86e5182354d4bf3af99865
SSDEEP

3072:nNShJPGX6zTfBv/bU+YbRoXhbhXNBeTqbUT6:n4eXUT5vzpY+R7BeiS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667b4129bc0098187aa49e21c011b7f3

Files

667b4129bc0098187aa49e21c011b7f3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

b4znx54o
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xskz
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f28vh
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE