768a0035a1e5372e4b775b4ce1accdd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768a0035a1e5372e4b775b4ce1accdd7
Size

46KB
MD5

768a0035a1e5372e4b775b4ce1accdd7
SHA1

a3abd3daf7da16d3b686d911e32894ad57e7d544
SHA256

49751c38d33fb5d185f2211490b1f4996858311eeaa2a0a16d965c05dcca2346
SHA512

c68a895bf195cff24b833519856b874bbb03afff274be348aa7685eb7eb01861b46ee8b90b3aa325dad1660923750b12029a84fd3b54028044ce4b8388538178
SSDEEP

768:JmpM8VB5IRtRHZQjCzciHCjMASF2j6OZ5WYr/8UMMYLx4qR3DPn+:Jajy50CzciHCj/SFDMfr/8UMMWF3D/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
768a0035a1e5372e4b775b4ce1accdd7

Files

768a0035a1e5372e4b775b4ce1accdd7
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ