abc3387f71d53dbefa07b606454c3e75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abc3387f71d53dbefa07b606454c3e75
Size

48KB
MD5

abc3387f71d53dbefa07b606454c3e75
SHA1

0b54275c393555f68e3c88b4de4cc48a79bcc5a2
SHA256

77fea685cdc58260346bc2f441d0bde69fcce522bbf7a18c23b2e9f50a79a450
SHA512

d0b723aec2c5497241e5116638be1b4b8289343a85e502b670dd547a7c21382f600d6c2353a91d487753f32bd4e8b9b534a218b274edc65a18ceb212119078dc
SSDEEP

768:9mpM8V/VQ1GuorLvh4KiHCjMATQb9s/NS8D+qPL3ZaxOH+V3Q:9aja6LhNiHCj/Tf8qPL3ZK7V3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc3387f71d53dbefa07b606454c3e75

Files

abc3387f71d53dbefa07b606454c3e75
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookCs
MgHookOp

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ