7b0bb439695ac812db43c1e813de6184 | Triage

Sharing

General

Target

7b0bb439695ac812db43c1e813de6184
Size

635KB
MD5

7b0bb439695ac812db43c1e813de6184
SHA1

67d573f23a49685d920532e92018fe4f637cd88b
SHA256

a0c9a1791aac938059f371a4a26e39e080ffd123d04423c0432683510dcb6460
SHA512

c9e30aec02640fb8b53c93c4bc34c50388d6509d34bdac85b7378a31dc2b00f55f7102b10d5d55e23276cf55b8be577f4bfd06192b9125ab1f9e992a8c1ddf48
SSDEEP

12288:iM0t9FNcxDMmfrLAF8rZIRf2MmsX4e2E1kZgZWha/fO79s:6tjNcXnVInv4er1Cg8ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b0bb439695ac812db43c1e813de6184

Files

7b0bb439695ac812db43c1e813de6184
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ