7bb99ee1cd31d52308657f881ecd71fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bb99ee1cd31d52308657f881ecd71fe
Size

640KB
MD5

7bb99ee1cd31d52308657f881ecd71fe
SHA1

bc48e14a0d577830fce6ab8cbf0e3cb1cf617526
SHA256

c8a764b12b542257222b05327fad82cfc2cd4795f369e7a44f5b6151a1a7d5f7
SHA512

b51ac7db5178d727511b5f1df279a65ba6bda230f096aeed77da0ce9f7e150ec25c922bbc24ac455e4e8f8fdd4eda404a8be9d540fde50ce8a0fc9cd4dfc9344
SSDEEP

12288:3kdtYzsZDM2fjYiV/UzxoyS7nUmsn7lmDNIh+L2tePm:0dGzs/0kwolUf7lEuh+LA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bb99ee1cd31d52308657f881ecd71fe

Files

7bb99ee1cd31d52308657f881ecd71fe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ