8f11752f5509394498c509f5818bcd17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f11752f5509394498c509f5818bcd17
Size

137KB
MD5

8f11752f5509394498c509f5818bcd17
SHA1

8d0b113dee052516a7aed8bbee6c92574f6a8805
SHA256

d613f5f8601db08c6e70d387b52644c35dfb630282642c1cbdb1b03eae1f1389
SHA512

f93b7da0f3b9dd72bd0fefd4b5e4c2cddc267e01f07492421770fbcb6de4eada0b84dbf33e3e8995e32e02c21909a0555c6b02100e22e7882ad748b97e06b115
SSDEEP

1536:YKAFIVdeSYu8mgb/hbamEA1auajBdHE1uP0L1jTQEtPomi:YKAFIL9V2hOmv1auydHE1uE1jMEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f11752f5509394498c509f5818bcd17

Files

8f11752f5509394498c509f5818bcd17
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

ijg8d
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

k
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lts4ba
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE