c192f1a61b58c0471bfbf13156bca0c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c192f1a61b58c0471bfbf13156bca0c3
Size

140KB
MD5

c192f1a61b58c0471bfbf13156bca0c3
SHA1

beca91dc7fb20a854f862d479bf058e8ab739d9b
SHA256

735977dc42ffb8c5ce79b9508c096c90c77a3a54b616ebd59b120204fae5a9d8
SHA512

15ae97787be4b8621b990eedb949f1a113fe7fba9c262bdd988e5e161f3474e3cfceee9d732845a44a4720358b4589a9344d21dd3509273559299ae91c7ee339
SSDEEP

3072:xKC3Y0gjT0Yy0X1rxduLNu78nYQy2f9mq7:XRgcYyofIYY7Dkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c192f1a61b58c0471bfbf13156bca0c3

Files

c192f1a61b58c0471bfbf13156bca0c3
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

m
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

caer
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dt
Size: 560B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE