cb83d325e31b9ff34197498a79d787df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb83d325e31b9ff34197498a79d787df
Size

45KB
MD5

cb83d325e31b9ff34197498a79d787df
SHA1

39adb4be581e4a486756f269705c07687ac2402f
SHA256

4cb69e8f45dfc3f9f119cdbf52a0b1584314d995ba7fc3e0ef90230d96540a11
SHA512

e8558c7bcf4b144875e1024c961cefeb4286f6570f30554a72b85c9cf4061de98cd8ecd1d9f808a1cba1ce48a1e2bc8c4280010de186626026d6f8d6694a8f43
SSDEEP

768:h881R5oxNRHZs+LehC6v7iHCjMA2XVrb7imnJnU4fU5x4qBC:hzC5s+LehCuiHCj/2l5FfUflC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb83d325e31b9ff34197498a79d787df

Files

cb83d325e31b9ff34197498a79d787df
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsHookOp
MsHookif

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ