c78effc21c059f1a0c9dfa98d2acb261 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78effc21c059f1a0c9dfa98d2acb261
Size

81KB
MD5

c78effc21c059f1a0c9dfa98d2acb261
SHA1

f2fbfa08d4f6ae3c45dad88fbc25a7c0cec72598
SHA256

4f52a7c0027581ad582af50fb35d684b00df05811819b0374602a8e183a56369
SHA512

b5dc2ba2f13f04f4891621746dee449f26a428bd680bfe7928139c256126964c938ea234604fc0b5462114b28c7c380cbb38a0a824e9e62b8f78382e8048ec91
SSDEEP

1536:rflTLEVxV2GnZ6KchJU0vCC1VofIrlLx0S9ubPfhbg9o+EZMfJNe4OTYOi5R7f0y:xYrZ6zHU0tVoQ510S9uDVg9oRZMxfsYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78effc21c059f1a0c9dfa98d2acb261

Files

c78effc21c059f1a0c9dfa98d2acb261
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

xs
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gyd
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fvj
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE