769e66e147fe3410feffdf3517f0f34a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

769e66e147fe3410feffdf3517f0f34a
Size

154KB
MD5

769e66e147fe3410feffdf3517f0f34a
SHA1

70df26178c86fae75d39d940b4305a290d1daf61
SHA256

329219642728257c50f6a9854b7682a8e4df2a0bd0e6278cc4267b4977fee680
SHA512

ca31fd0e404b60d431099f16192949caffa0af4d2a87ed31c27b6fca493d1faf580a0f1c0384e8fb9bcd46317b35a8cc03160d7d7840408f84604c591596b4a6
SSDEEP

3072:7jEoExUSOO3CL8TfnSWV0+kD+MjOF0Sp7PFxGkK+2YqRTu7eRy37Buyh:nvqUDLIUlW0SpFxtK+2YqRTCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769e66e147fe3410feffdf3517f0f34a

Files

769e66e147fe3410feffdf3517f0f34a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn

Sections

CODE
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ