bbf3325e825104057ab8c166dca256f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf3325e825104057ab8c166dca256f3
Size

80KB
MD5

bbf3325e825104057ab8c166dca256f3
SHA1

5b8209bfcedc92ec1a5f9e002a7655fa5ad38e6d
SHA256

ae5ae74a133950d0c578ba904f15a6be3017f5fdcdfe52043f7065c3a7c30dfe
SHA512

e5add5a52aac06ee3d215dea5a704a019b40e18fccec3a138e1bc4abb5f0e35b2e6351b47dce778e34e107061fffe9e3c7ab695fe60172e875d1a3c914d680e0
SSDEEP

1536:GT4z1/TI37GRRHZX0P4mMnlBQVdRg1VJFdA9zaSvSCQRkvlzzorR4:C4q7GHZ1nlCVde1VpA9zdvSBLq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbf3325e825104057ab8c166dca256f3

Files

bbf3325e825104057ab8c166dca256f3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JpHookOff
JpHookOn

Sections

bw
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r2t
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wxka2ooz
Size: 331B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE