79fa4e291b7c19be749c83fc5fb5d8f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79fa4e291b7c19be749c83fc5fb5d8f3
Size

812KB
MD5

79fa4e291b7c19be749c83fc5fb5d8f3
SHA1

4d4df560f549a62792106116706e5f9f41654252
SHA256

0b6d2513de9265d9bb43601733f84e94b22df6abf8011c8d4016f57a1510dd26
SHA512

3509c1d79a0e26734b057dd3d4448580febc7ba25989e62e44415b520170793bdc5eecca98cb19d681545305509b20e3d562818be65876868b423be9a47de143
SSDEEP

12288:TZJVev/xAd899XMj4P1KkwR5p+YLxb9u15LFgEFgR4kxDFa2bHD1co7dduD:9HYxt9mjqK3ZL59UL2YCvDFnrDmoLuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79fa4e291b7c19be749c83fc5fb5d8f3

Files

79fa4e291b7c19be749c83fc5fb5d8f3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 669KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ