c1992154d66756b28fd6c0e49ef25875 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1992154d66756b28fd6c0e49ef25875
Size

80KB
MD5

c1992154d66756b28fd6c0e49ef25875
SHA1

ba9f6f52805ceb25b780465094baa756f51880de
SHA256

270da5b13996765ca12cd2e865123cce23ab1f994e0dac449f78b4ee09c2696e
SHA512

c8c3aa6c4e87ac62a61a717f36846452440e1708ba3b47de7195487b7e0b6549ed733757f7cac3e7ec57d3965e1a320d0150a52f1621d2e99344122863bd6817
SSDEEP

1536:r6Cyv0XF1MwITHWD7GVka0R6s8N4pH/tNmRURc/TmzEXdYsXMM:Wd01uwH3DB6fapftNmRURSmzP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1992154d66756b28fd6c0e49ef25875

Files

c1992154d66756b28fd6c0e49ef25875
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

y5ri7hgu
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qyl8zba
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wt7tlw
Size: 124B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE