99d26269e29b714fd240bc3561ca8f70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99d26269e29b714fd240bc3561ca8f70
Size

91KB
MD5

99d26269e29b714fd240bc3561ca8f70
SHA1

021c047e6d80af23a5ce09b4c4a0d113cfb3a32d
SHA256

66c0cc59e3305db1545d0fb3e91ad7873d23a0f8a60b63590d44bb5e0717d336
SHA512

6170cd59acdb88cb3f5cf4d755816610f1aecc6ac8909de9a19f6ef766a52343d0684eb4ede1ee6068ddc98d0810d4a9a059155df25721a7eac67069f1e41b17
SSDEEP

1536:5p0k4p3uvY/vJRIU891uhTiKX4Pkxhd4HnLylol7LVpgKCzrF/SwiMixz/SLiQKk:5Kk4+ABRIl1uhTXwILmy+xLV6KCzEwi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99d26269e29b714fd240bc3561ca8f70

Files

99d26269e29b714fd240bc3561ca8f70
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

84a
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ve
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jx
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE