cb7ebbe1cc59cc964939307d7bb33b84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb7ebbe1cc59cc964939307d7bb33b84
Size

88KB
MD5

cb7ebbe1cc59cc964939307d7bb33b84
SHA1

c98c877f3d6111bbb7ff81533e4eb769cf705700
SHA256

a58b389b50f08dd0fe0ee3801f93a90ee87fbcf6a055291bffe3b02ae8ffbbde
SHA512

c0364e21e3cce31d356eddb99c2304eced5517fb1f25e70c65eae2b04129e45f42615c1816575637fafcfc8dfca9b9795b392bb6722b120a1be1e9bc9575e7d7
SSDEEP

1536:f363J2yojvUwA2D8QuuC9VwR1vTl4iuxD0OBndtFiN33JwM8XUS/Ez50rpX+OyQH:M0y4vRlu8mVb2HJ6XUS/+6uOyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb7ebbe1cc59cc964939307d7bb33b84

Files

cb7ebbe1cc59cc964939307d7bb33b84
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn

Sections

Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE