b7fc18cac33aa5271136b291f253f370 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7fc18cac33aa5271136b291f253f370
Size

29KB
MD5

b7fc18cac33aa5271136b291f253f370
SHA1

126d39e8763d68269456dc419e83c906fc26bb61
SHA256

2072ca2bf17df866b65f828d42482f0f4fab850312ed868f16739c01c18eefdc
SHA512

b7c097166c766d0038e6cb24e943f600f7401fc6ff579546934dad03c9cfaf077c5bc99349c8c9c022650e88a21288c33ebb19269cb997cf0dfdf481b8b850bd
SSDEEP

384:NYAHxUSCqujBwKnGQ6FIE8kmRsreayiy9RdiFZCdP+elqroE/7AzdDPeeQSv/:/KSCquFw0GQO/mRsrgiLSP+egEndDPrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7fc18cac33aa5271136b291f253f370

Files

b7fc18cac33aa5271136b291f253f370
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MgHookOk
MgHookOn

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ