c2df66734fb17abdeea0ac79d945c7c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2df66734fb17abdeea0ac79d945c7c8
Size

140KB
MD5

c2df66734fb17abdeea0ac79d945c7c8
SHA1

3017ccc6ea3bdfa79e6e2a9b2b07b852c1e37c3b
SHA256

cfb8807683a29d92e1e7c330ae66a5c5577ac5c6fc1d35bdd045e7bdd1e4b998
SHA512

67f1e0466311a074f0308d60769a8790f26688e2104fb5113cca64b15ed70ed3cf22b6cb4a0a10d9f5accb43c227c3546b23d0d4f169f079b1bb928f9f9d676b
SSDEEP

1536:FsQVhnv/i8gVfbGoTQ62yr+fGj5+2i+vtQWGHrV:64/iXVfyUQXyyfI5+2ieqWCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2df66734fb17abdeea0ac79d945c7c8

Files

c2df66734fb17abdeea0ac79d945c7c8
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

u
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gdrec
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE