b83be4f8b3549005cc7368064ca94f74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b83be4f8b3549005cc7368064ca94f74
Size

1.1MB
MD5

b83be4f8b3549005cc7368064ca94f74
SHA1

6d539d911a55b0bd1c8d0ad4c117c867d3fae6cd
SHA256

7dff3a3146202d18bb0b50c4ed97f86cb6f0047d65dd6c2c894a2935bf853104
SHA512

526ad6751ecc74b7337f178e52785292617384b011382cf3d772258ae8beca7e0879e0204bcf8738de572f50a6c198229a8bf856ae04ac53bac27202da2e2022
SSDEEP

24576:QUlY+Kgybq6AH/JRvzRFJMXAmNxhAvSsXBD:QnjMTJMXLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b83be4f8b3549005cc7368064ca94f74

Files

b83be4f8b3549005cc7368064ca94f74
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DisableMouseHook
DllRegisterServer
EnableMouseHook
ServiceMain

Sections

CODE
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ