c05588fddea898d513f5a4600e80d7a3 | Triage

Sharing

General

Target

c05588fddea898d513f5a4600e80d7a3
Size

46KB
MD5

c05588fddea898d513f5a4600e80d7a3
SHA1

4784408bab805875610a49d3de34d1f6f321bbc2
SHA256

d1a70ae1fff4af61f0e4ba1502c51d6f5a581ccb18c266084c77ccba4d609ac0
SHA512

e08a0aaeebc592a9fa3912ef9acb9b93b66a382c712cacd2af4ededabddf7e747ca9f59711026f9ee198f974050a493f761000e42386dd69ba88058204183822
SSDEEP

768:ZmpM8VB5IRtRHZQB1BciHCjMASFujjpZ1HyrugjBgLx4q43DP2uA:Zajy5G1BciHCj/SFydSrugjBeU3DuuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05588fddea898d513f5a4600e80d7a3

Files

c05588fddea898d513f5a4600e80d7a3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MxHookOff
MxHookOn

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ