ab9e83f9016088e6f205410d950f404a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab9e83f9016088e6f205410d950f404a
Size

77KB
MD5

ab9e83f9016088e6f205410d950f404a
SHA1

8819d7800eb19ef975fd84f474ffabb53e868484
SHA256

f863d59c54bd3e477393ac2e1df100ad2a467b1491fe93ba63ad830e0ae12ed4
SHA512

7a339c033e9fd426071a571db3b2b3622f420a20ddfe0c039e1ae6ed663569c9a35b396b41524f6f16e3cd2870c50e3b6fd78ebe43e4007b56957643a7a3ecb3
SSDEEP

1536:5lq3zQfapUnvX7JBX0R4KIcmseUiQaLIz:gzRpUnvXoAsCLIz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab9e83f9016088e6f205410d950f404a

Files

ab9e83f9016088e6f205410d950f404a
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn

Sections

CODE
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ